[Tue Nov 11 00:45:41.547380 2025] [proxy_fcgi:error] [pid 31985:tid 32010] (70007)The timeout specified has expired: [client 91.92.242.56:60825] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 00:47:27.111363 2025] [proxy_fcgi:error] [pid 31985:tid 32009] (70007)The timeout specified has expired: [client 91.92.242.56:60825] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 00:49:44.282440 2025] [proxy_fcgi:error] [pid 31985:tid 32024] (70007)The timeout specified has expired: [client 91.92.242.56:60825] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 00:50:45.132386 2025] [proxy_fcgi:error] [pid 31985:tid 32025] (70007)The timeout specified has expired: [client 91.92.242.56:60825] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 00:54:16.848427 2025] [proxy_fcgi:error] [pid 24554:tid 24577] (70007)The timeout specified has expired: [client 91.92.242.56:52219] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:01:23.735492 2025] [proxy_fcgi:error] [pid 24554:tid 24566] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:04:45.939401 2025] [proxy_fcgi:error] [pid 24554:tid 24577] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:05:46.791366 2025] [proxy_fcgi:error] [pid 24554:tid 24563] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:06:47.640377 2025] [proxy_fcgi:error] [pid 24554:tid 24573] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:07:48.487515 2025] [proxy_fcgi:error] [pid 24554:tid 24582] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:08:49.341409 2025] [proxy_fcgi:error] [pid 24554:tid 24579] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:09:50.705390 2025] [proxy_fcgi:error] [pid 24554:tid 24569] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:10:51.578469 2025] [proxy_fcgi:error] [pid 24554:tid 24564] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:11:52.440366 2025] [proxy_fcgi:error] [pid 24554:tid 24568] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:12:53.805528 2025] [proxy_fcgi:error] [pid 24554:tid 24561] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:13:54.653379 2025] [proxy_fcgi:error] [pid 24554:tid 24568] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:14:55.502027 2025] [proxy_fcgi:error] [pid 24554:tid 24565] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:15:56.373401 2025] [proxy_fcgi:error] [pid 24554:tid 24560] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:16:57.242418 2025] [proxy_fcgi:error] [pid 24554:tid 24582] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:17:58.097814 2025] [proxy_fcgi:error] [pid 24554:tid 24576] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:18:59.475370 2025] [proxy_fcgi:error] [pid 24554:tid 24574] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:20:00.325376 2025] [proxy_fcgi:error] [pid 24554:tid 24565] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:20:51.850575 2025] [proxy_fcgi:error] [pid 41839:tid 41934] (70007)The timeout specified has expired: [client 101.198.0.180:25344] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:21:01.192431 2025] [proxy_fcgi:error] [pid 24554:tid 24560] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:21:10.967531 2025] [proxy_fcgi:error] [pid 41816:tid 41868] (70007)The timeout specified has expired: [client 48.210.57.6:57779] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:22:02.047035 2025] [proxy_fcgi:error] [pid 24554:tid 24568] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:23:02.895368 2025] [proxy_fcgi:error] [pid 24554:tid 24578] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:23:03.681458 2025] [:error] [pid 24554:tid 24580] [client 91.92.242.56:49581] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||wendybinks.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wendybinks.com"] [uri "/wp-content/debug.log"] [unique_id "aRIfdxbgcg5JFvN-BGVuJgAAAtY"]
[Tue Nov 11 01:24:04.534368 2025] [proxy_fcgi:error] [pid 24554:tid 24576] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:25:05.384383 2025] [proxy_fcgi:error] [pid 24554:tid 24577] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:26:06.233554 2025] [proxy_fcgi:error] [pid 24554:tid 24560] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:27:07.082699 2025] [proxy_fcgi:error] [pid 24554:tid 24580] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:28:08.490388 2025] [proxy_fcgi:error] [pid 24554:tid 24570] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:29:09.339427 2025] [proxy_fcgi:error] [pid 24554:tid 24561] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:30:10.193385 2025] [proxy_fcgi:error] [pid 24554:tid 24582] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:31:11.195369 2025] [proxy_fcgi:error] [pid 24554:tid 24582] (70007)The timeout specified has expired: [client 91.92.242.56:49581] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 01:40:53.006663 2025] [:error] [pid 24554:tid 24581] [client 43.166.244.66:46964] [client 43.166.244.66] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRIjpRbgcg5JFvN-BGVz0AAAAtc"]
[Tue Nov 11 01:50:26.667160 2025] [:error] [pid 14120:tid 14151] [client 91.92.242.56:54544] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/usc-e-shop/functions/content-log.php"] [unique_id "aRIl4iT8OKKuPaCGMt0qkgAAAVg"]
[Tue Nov 11 01:54:19.404726 2025] [:error] [pid 24225:tid 24245] [client 91.92.242.56:49878] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/post-pdf-export/dompdf/dompdf.php"] [unique_id "aRImy52rrdiHvhXEioV9uAAAAkw"]
[Tue Nov 11 01:54:20.473489 2025] [:error] [pid 41825:tid 41890] [client 91.92.242.56:52202] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/web-portal-lite-client-portal-secure-file-sharing-private-messaging/includes/libs/pdf/dompdf.php"] [unique_id "aRImzIr5hkwmQG_pQgAZrgAAAEM"]
[Tue Nov 11 01:54:22.601322 2025] [:error] [pid 14120:tid 14140] [client 91.92.242.56:49241] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "aRImziT8OKKuPaCGMt0rzgAAAVI"]
[Tue Nov 11 01:54:23.669193 2025] [:error] [pid 41839:tid 41921] [client 91.92.242.56:57340] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRImzzGxg5uCD9Nfh5XIUQAAAIc"]
[Tue Nov 11 01:54:24.759243 2025] [:error] [pid 24817:tid 24838] [client 91.92.242.56:56616] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "aRIm0OBo1Juuc7yq76DUdgAAAxM"]
[Tue Nov 11 01:54:25.854435 2025] [:error] [pid 24225:tid 24257] [client 91.92.242.56:51404] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIm0Z2rrdiHvhXEioV9wgAAAlg"]
[Tue Nov 11 01:54:27.006756 2025] [:error] [pid 14120:tid 14130] [client 91.92.242.56:59863] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRIm0yT8OKKuPaCGMt0r1AAAAUg"]
[Tue Nov 11 01:54:28.074447 2025] [:error] [pid 41978:tid 41994] [client 91.92.242.56:61643] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/mapsvg/gm_download.php"] [unique_id "aRIm1JTXUiwDnS4PcJ9NTwAAAMA"]
[Tue Nov 11 01:54:29.141907 2025] [:error] [pid 14120:tid 14140] [client 91.92.242.56:51816] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/mapsvg-lite-interactive-vector-maps/gm_download.php"] [unique_id "aRIm1ST8OKKuPaCGMt0r3AAAAVI"]
[Tue Nov 11 02:54:35.027443 2025] [:error] [pid 24817:tid 24826] [client 170.106.72.93:49892] [client 170.106.72.93] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRI06-Bo1Juuc7yq76DdegAAAwc"]
[Tue Nov 11 03:28:06.269035 2025] [autoindex:error] [pid 59726:tid 59803] [client 196.251.85.129:61847] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 11 08:06:25.368379 2025] [proxy_fcgi:error] [pid 19183:tid 19192] (70007)The timeout specified has expired: [client 91.92.242.56:64807] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:07:26.226381 2025] [proxy_fcgi:error] [pid 19183:tid 19203] (70007)The timeout specified has expired: [client 91.92.242.56:64807] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:08:27.085384 2025] [proxy_fcgi:error] [pid 19183:tid 19191] (70007)The timeout specified has expired: [client 91.92.242.56:64807] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:09:27.943367 2025] [proxy_fcgi:error] [pid 19183:tid 19199] (70007)The timeout specified has expired: [client 91.92.242.56:64807] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:10:28.801380 2025] [proxy_fcgi:error] [pid 19183:tid 19202] (70007)The timeout specified has expired: [client 91.92.242.56:64807] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:11:29.657386 2025] [proxy_fcgi:error] [pid 19183:tid 19193] (70007)The timeout specified has expired: [client 91.92.242.56:64807] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:12:30.513376 2025] [proxy_fcgi:error] [pid 19183:tid 19188] (70007)The timeout specified has expired: [client 91.92.242.56:64807] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:13:31.372367 2025] [proxy_fcgi:error] [pid 19183:tid 19208] (70007)The timeout specified has expired: [client 91.92.242.56:64807] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:15:32.981364 2025] [proxy_fcgi:error] [pid 19183:tid 19197] (70007)The timeout specified has expired: [client 91.92.242.56:64807] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:16:34.327588 2025] [proxy_fcgi:error] [pid 19183:tid 19193] (70007)The timeout specified has expired: [client 91.92.242.56:64807] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:26:01.925886 2025] [:error] [pid 19909:tid 19918] [client 91.92.242.56:52632] [client 91.92.242.56] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||wendybinks.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "wendybinks.com"] [uri "/wp-content/debug.log"] [unique_id "aRKCmZj4ijhm0fzOSagVlAAAAoU"]
[Tue Nov 11 08:32:25.714387 2025] [proxy_fcgi:error] [pid 34002:tid 34029] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:33:27.102690 2025] [proxy_fcgi:error] [pid 34002:tid 34029] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:34:27.981367 2025] [proxy_fcgi:error] [pid 34002:tid 34012] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:35:29.363385 2025] [proxy_fcgi:error] [pid 34002:tid 34020] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:36:30.269370 2025] [proxy_fcgi:error] [pid 34002:tid 34008] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:37:31.127554 2025] [proxy_fcgi:error] [pid 34002:tid 34023] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:38:31.984383 2025] [proxy_fcgi:error] [pid 34002:tid 34027] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:39:32.840449 2025] [proxy_fcgi:error] [pid 34002:tid 34021] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:40:33.698642 2025] [proxy_fcgi:error] [pid 34002:tid 34010] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:41:34.573382 2025] [proxy_fcgi:error] [pid 34002:tid 34016] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 08:42:35.496380 2025] [proxy_fcgi:error] [pid 34002:tid 34030] (70007)The timeout specified has expired: [client 91.92.242.56:58319] AH01075: Error dispatching request to : (polling)
[Tue Nov 11 12:07:07.280028 2025] [:error] [pid 53449:tid 53474] [client 213.209.143.137:57310] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/user-registration-pro/readme.txt"] [unique_id "aRK2a9pz08j5NoUSzp_rsgAAAVQ"]
[Tue Nov 11 12:07:07.800187 2025] [:error] [pid 59670:tid 59677] [client 213.209.143.137:51488] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/user-registration-pro/readme.txt"] [unique_id "aRK2a6k2Cnts0y-hpfqx1QAAAIQ"]
[Tue Nov 11 12:07:08.319478 2025] [:error] [pid 53356:tid 53400] [client 213.209.143.137:60995] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/user-registration-pro/readme.txt"] [unique_id "aRK2bOkdmt0kzjVcUN9l_AAAAE8"]
[Tue Nov 11 12:07:08.845254 2025] [:error] [pid 53356:tid 53405] [client 213.209.143.137:53541] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/user-registration-pro/readme.txt"] [unique_id "aRK2bOkdmt0kzjVcUN9mAQAAAFQ"]
[Tue Nov 11 14:42:09.059140 2025] [:error] [pid 59670:tid 59681] [client 216.24.219.62:63535] [client 216.24.219.62] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/postnews.php"] [unique_id "aRLawak2Cnts0y-hpfoBTgAAAIg"]
[Tue Nov 11 14:42:09.548897 2025] [:error] [pid 53449:tid 53467] [client 216.24.219.92:23025] [client 216.24.219.92] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/postnews.php"] [unique_id "aRLawdpz08j5NoUSzp8q4QAAAU0"]
[Tue Nov 11 14:42:10.038660 2025] [:error] [pid 53414:tid 53416] [client 216.24.219.73:58341] [client 216.24.219.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRLawgs6pHd_Z5oc1edr_gAAAQA"]
[Tue Nov 11 17:39:34.513131 2025] [:error] [pid 36579:tid 36615] [client 223.15.245.170:44617] [client 223.15.245.170] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRMEVumuedRSntjwLw5ivQAAAAQ"]
[Tue Nov 11 17:39:50.095720 2025] [:error] [pid 36578:tid 36591] [client 159.203.165.47:46268] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRMEZkMi03XeylcOo5Wz7AAAAMg"]
[Tue Nov 11 17:39:51.210499 2025] [:error] [pid 36578:tid 36593] [client 159.203.165.47:49968] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRMEZ0Mi03XeylcOo5Wz7QAAAMo"]
[Tue Nov 11 21:26:52.316426 2025] [:error] [pid 36578:tid 36606] [client 159.203.165.47:44518] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRM5nEMi03XeylcOo5XqywAAANc"]
[Tue Nov 11 21:26:57.228741 2025] [:error] [pid 36579:tid 36611] [client 159.203.165.47:33262] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRM5oemuedRSntjwLw6bGAAAAAA"]
[Tue Nov 11 22:10:26.048237 2025] [:error] [pid 47931:tid 47949] [client 213.209.143.137:63920] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND0jWP7ptQ6Y-gz68dTgAAAU8"]
[Tue Nov 11 22:10:26.569122 2025] [:error] [pid 47860:tid 47893] [client 213.209.143.137:50897] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND0qPe6bkmJWx80CzSLwAAAEI"]
[Tue Nov 11 22:10:27.091611 2025] [:error] [pid 47964:tid 47970] [client 213.209.143.137:54625] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/excel-like-price-change-for-woocommerce-and-wp-e-commerce-light/readme.txt"] [unique_id "aRND016CQC3ebUS5pkQC1wAAAYM"]
[Tue Nov 11 22:22:20.833316 2025] [:error] [pid 49628:tid 49636] [client 159.203.165.47:45064] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRNGnL82AgnfnwL7V2Y5ZAAAAIY"]
[Tue Nov 11 22:22:25.155434 2025] [:error] [pid 47931:tid 47951] [client 159.203.165.47:56508] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRNGoTWP7ptQ6Y-gz68kTAAAAVE"]
[Wed Nov 12 00:09:36.285009 2025] [:error] [pid 47964:tid 47985] [client 175.6.217.4:59243] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRNfwF6CQC3ebUS5pkQztgAAAZI"]
[Wed Nov 12 00:35:59.946381 2025] [:error] [pid 54702:tid 55032] [client 159.203.165.47:48168] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRNl74Cgou0IW-jKFfmK6AAAAZI"]
[Wed Nov 12 00:36:04.650375 2025] [:error] [pid 54700:tid 54957] [client 159.203.165.47:50966] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRNl9GB5AaOtkwsSKTr9wQAAAFQ"]
[Wed Nov 12 01:09:52.509296 2025] [:error] [pid 27725:tid 27752] [client 159.203.165.47:35116] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRNt4Akyc7zt9UxDwPZ6UQAAANg"]
[Wed Nov 12 01:09:57.434010 2025] [:error] [pid 54701:tid 55008] [client 159.203.165.47:60700] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRNt5Rf-2zu56UfbUVK4rwAAAVY"]
[Wed Nov 12 01:12:07.894951 2025] [:error] [pid 54701:tid 54986] [client 77.23.252.90:60206] [client 77.23.252.90] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 77.23.252.90, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aRNuZxf-2zu56UfbUVK5UwAAAUE"]
[Wed Nov 12 02:05:30.068359 2025] [:error] [pid 40747:tid 40807] [client 159.203.165.47:40386] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRN66v9Knd3RnQx09rLb4AAAAIM"]
[Wed Nov 12 02:05:34.163498 2025] [:error] [pid 40833:tid 40846] [client 159.203.165.47:56846] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRN67mTefCfEPkRt3xnfEgAAAMM"]
[Wed Nov 12 03:14:50.352013 2025] [:error] [pid 40746:tid 40790] [client 159.203.165.47:35658] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aROLKp75CjGFTLdEMn4PVAAAAE0"]
[Wed Nov 12 03:14:54.058147 2025] [:error] [pid 54518:tid 54523] [client 159.203.165.47:53592] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aROLLqZo3QGSqi1oDHlgpwAAAQM"]
[Wed Nov 12 04:19:42.874666 2025] [:error] [pid 57312:tid 57339] [client 213.209.143.137:54151] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aROaXo0cuHgB17JK5qWdVAAAANY"]
[Wed Nov 12 04:19:43.376730 2025] [:error] [pid 57222:tid 57250] [client 213.209.143.137:64242] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aROaX2GJazH5XCcA91cTTwAAABc"]
[Wed Nov 12 04:19:43.878984 2025] [:error] [pid 57312:tid 57329] [client 213.209.143.137:51724] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aROaX40cuHgB17JK5qWdXQAAAMw"]
[Wed Nov 12 04:19:44.378759 2025] [:error] [pid 57223:tid 57262] [client 213.209.143.137:55231] [client 213.209.143.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aROaYBUU8_2aS__aG8Ys1AAAAEU"]
[Wed Nov 12 05:27:10.672963 2025] [:error] [pid 57312:tid 57332] [client 159.203.165.47:55192] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aROqLo0cuHgB17JK5qW54wAAAM8"]
[Wed Nov 12 05:27:13.131790 2025] [:error] [pid 32959:tid 32979] [client 159.203.165.47:51960] [client 159.203.165.47] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aROqMXoyrq7OJfcFnDi77QAAARA"]
[Wed Nov 12 11:59:17.061418 2025] [:error] [pid 60405:tid 60413] [client 164.90.228.79:50998] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/@vite/env"] [unique_id "aRQGFXMGv_mlVi6mf5p2qQAAAAU"]
[Wed Nov 12 11:59:17.970367 2025] [:error] [pid 60095:tid 60106] [client 164.90.228.79:51000] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/actuator/env"] [unique_id "aRQGFXlw2elroagFF1rDaQAAAEc"]
[Wed Nov 12 11:59:18.726291 2025] [:error] [pid 60405:tid 60419] [client 164.90.228.79:51012] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRQGFnMGv_mlVi6mf5p2rQAAAAs"]
[Wed Nov 12 11:59:19.463363 2025] [:error] [pid 12744:tid 12767] [client 164.90.228.79:51022] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/server"] [unique_id "aRQGF51cp_ouUvkFj0WoAgAAARM"]
[Wed Nov 12 11:59:20.263188 2025] [:error] [pid 60405:tid 60424] [client 164.90.228.79:51030] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/.vscode/sftp.json"] [unique_id "aRQGGHMGv_mlVi6mf5p2sAAAABA"]
[Wed Nov 12 11:59:21.032796 2025] [:error] [pid 60405:tid 60412] [client 164.90.228.79:51046] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/about"] [unique_id "aRQGGXMGv_mlVi6mf5p2swAAAAQ"]
[Wed Nov 12 11:59:21.848289 2025] [:error] [pid 60405:tid 60409] [client 164.90.228.79:51058] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/debug/default/view"] [unique_id "aRQGGXMGv_mlVi6mf5p2tgAAAAE"]
[Wed Nov 12 11:59:22.666318 2025] [:error] [pid 60405:tid 60415] [client 164.90.228.79:34880] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/v2/_catalog"] [unique_id "aRQGGnMGv_mlVi6mf5p2twAAAAc"]
[Wed Nov 12 11:59:23.474488 2025] [:error] [pid 60095:tid 60103] [client 164.90.228.79:34894] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRQGG3lw2elroagFF1rDbAAAAEQ"]
[Wed Nov 12 11:59:24.208085 2025] [:error] [pid 60097:tid 60165] [client 164.90.228.79:34910] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/server-status"] [unique_id "aRQGHMdT5oio_TbWpi8BNQAAAMw"]
[Wed Nov 12 11:59:25.095204 2025] [:error] [pid 60097:tid 60163] [client 164.90.228.79:34914] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/login.action"] [unique_id "aRQGHcdT5oio_TbWpi8BNwAAAMo"]
[Wed Nov 12 11:59:28.263813 2025] [:error] [pid 60096:tid 60131] [client 164.90.228.79:34930] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/.DS_Store"] [unique_id "aRQGIDmzkhCvvk8DXOwssAAAAIU"]
[Wed Nov 12 11:59:29.039944 2025] [:error] [pid 12744:tid 12757] [client 164.90.228.79:34938] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.env"] [unique_id "aRQGIZ1cp_ouUvkFj0WoFQAAAQk"]
[Wed Nov 12 11:59:29.805733 2025] [:error] [pid 12744:tid 12765] [client 164.90.228.79:34950] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.git/config"] [unique_id "aRQGIZ1cp_ouUvkFj0WoFwAAARE"]
[Wed Nov 12 11:59:30.545894 2025] [:error] [pid 12744:tid 12768] [client 164.90.228.79:34958] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRQGIp1cp_ouUvkFj0WoGgAAARQ"]
[Wed Nov 12 11:59:31.286193 2025] [:error] [pid 12744:tid 12762] [client 164.90.228.79:34960] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/config.json"] [unique_id "aRQGI51cp_ouUvkFj0WoHAAAAQ4"]
[Wed Nov 12 11:59:32.024068 2025] [:error] [pid 12744:tid 12771] [client 164.90.228.79:44154] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/telescope/requests"] [unique_id "aRQGJJ1cp_ouUvkFj0WoHgAAARc"]
[Wed Nov 12 11:59:32.762081 2025] [:error] [pid 12744:tid 12749] [client 164.90.228.79:44170] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/info.php"] [unique_id "aRQGJJ1cp_ouUvkFj0WoIAAAAQE"]
[Wed Nov 12 11:59:33.540101 2025] [:error] [pid 60097:tid 60163] [client 164.90.228.79:44178] [client 164.90.228.79] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRQGJcdT5oio_TbWpi8BQQAAAMo"]
[Wed Nov 12 13:40:41.836750 2025] [:error] [pid 12744:tid 12754] [client 159.89.12.166:55046] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/@vite/env"] [unique_id "aRQd2Z1cp_ouUvkFj0XcwAAAAQY"]
[Wed Nov 12 13:40:42.575683 2025] [:error] [pid 12744:tid 12749] [client 159.89.12.166:55050] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/actuator/env"] [unique_id "aRQd2p1cp_ouUvkFj0XcxAAAAQE"]
[Wed Nov 12 13:40:43.440288 2025] [:error] [pid 60405:tid 60409] [client 159.89.12.166:55056] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRQd23MGv_mlVi6mf5qffAAAAAE"]
[Wed Nov 12 13:40:44.302671 2025] [:error] [pid 60405:tid 60421] [client 159.89.12.166:55066] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/server"] [unique_id "aRQd3HMGv_mlVi6mf5qffwAAAA0"]
[Wed Nov 12 13:40:45.047262 2025] [:error] [pid 60097:tid 60147] [client 159.89.12.166:55070] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/.vscode/sftp.json"] [unique_id "aRQd3cdT5oio_TbWpi8l0AAAAMI"]
[Wed Nov 12 13:40:45.850407 2025] [:error] [pid 60096:tid 60156] [client 159.89.12.166:55086] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/about"] [unique_id "aRQd3TmzkhCvvk8DXOxQKAAAAJY"]
[Wed Nov 12 13:40:46.579161 2025] [:error] [pid 60096:tid 60153] [client 159.89.12.166:55102] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/debug/default/view"] [unique_id "aRQd3jmzkhCvvk8DXOxQKQAAAJQ"]
[Wed Nov 12 13:40:47.353951 2025] [:error] [pid 12744:tid 12755] [client 159.89.12.166:55118] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/v2/_catalog"] [unique_id "aRQd351cp_ouUvkFj0XcywAAAQc"]
[Wed Nov 12 13:40:48.132144 2025] [:error] [pid 60096:tid 60126] [client 159.89.12.166:55124] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRQd4DmzkhCvvk8DXOxQKwAAAIA"]
[Wed Nov 12 13:40:48.864686 2025] [:error] [pid 60405:tid 60420] [client 159.89.12.166:55934] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/server-status"] [unique_id "aRQd4HMGv_mlVi6mf5qfgAAAAAw"]
[Wed Nov 12 13:40:49.610421 2025] [:error] [pid 60097:tid 60171] [client 159.89.12.166:55950] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/login.action"] [unique_id "aRQd4cdT5oio_TbWpi8l0wAAANI"]
[Wed Nov 12 13:40:52.802837 2025] [:error] [pid 60096:tid 60140] [client 159.89.12.166:55964] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/.DS_Store"] [unique_id "aRQd5DmzkhCvvk8DXOxQLAAAAI0"]
[Wed Nov 12 13:40:53.636377 2025] [:error] [pid 60096:tid 60131] [client 159.89.12.166:55978] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.env"] [unique_id "aRQd5TmzkhCvvk8DXOxQLgAAAIU"]
[Wed Nov 12 13:40:54.355278 2025] [:error] [pid 12744:tid 12770] [client 159.89.12.166:55990] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRQd5p1cp_ouUvkFj0Xc2wAAARY"]
[Wed Nov 12 13:40:55.086945 2025] [:error] [pid 60097:tid 60166] [client 159.89.12.166:56004] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRQd58dT5oio_TbWpi8l2AAAAM0"]
[Wed Nov 12 13:40:55.817192 2025] [:error] [pid 60097:tid 60163] [client 159.89.12.166:56020] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/config.json"] [unique_id "aRQd58dT5oio_TbWpi8l2QAAAMo"]
[Wed Nov 12 13:40:56.608422 2025] [:error] [pid 12744:tid 12766] [client 159.89.12.166:56034] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/telescope/requests"] [unique_id "aRQd6J1cp_ouUvkFj0Xc4AAAARI"]
[Wed Nov 12 13:40:57.343541 2025] [:error] [pid 60180:tid 60195] [client 159.89.12.166:56044] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/info.php"] [unique_id "aRQd6Vhgd7ccS8EZg1rnCwAAAU0"]
[Wed Nov 12 13:40:58.109574 2025] [:error] [pid 12744:tid 12770] [client 159.89.12.166:56060] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRQd6p1cp_ouUvkFj0Xc5QAAARY"]
[Wed Nov 12 15:02:29.731551 2025] [:error] [pid 60405:tid 60418] [client 173.239.224.43:56069] [client 173.239.224.43] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.43, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRQxBXMGv_mlVi6mf5q7pgAAAAo"]
[Wed Nov 12 18:29:13.793758 2025] [:error] [pid 60095:tid 60118] [client 173.239.224.26:40879] [client 173.239.224.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.26, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRRheXlw2elroagFF1ouDAAAAFM"]
[Wed Nov 12 19:21:36.662001 2025] [:error] [pid 60180:tid 60182] [client 173.239.224.17:48039] [client 173.239.224.17] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.17, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRRtwFhgd7ccS8EZg1pLhwAAAUA"]
[Wed Nov 12 20:13:09.025469 2025] [:error] [pid 60405:tid 60416] [client 173.239.224.39:42745] [client 173.239.224.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.39, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRR51XMGv_mlVi6mf5oPlwAAAAg"]
[Wed Nov 12 20:54:52.955611 2025] [:error] [pid 60405:tid 60408] [client 177.241.171.136:10581] [client 177.241.171.136] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.241.171.136, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aRSDnHMGv_mlVi6mf5oYegAAAAA"]
[Wed Nov 12 21:05:45.212212 2025] [:error] [pid 60097:tid 60161] [client 173.239.224.36:61777] [client 173.239.224.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.36, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRSGKcdT5oio_TbWpi-YDAAAAMg"]
[Wed Nov 12 21:58:03.183018 2025] [:error] [pid 60097:tid 60172] [client 173.239.224.18:48899] [client 173.239.224.18] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.18, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRSSa8dT5oio_TbWpi-hxQAAANM"]
[Wed Nov 12 22:47:02.834805 2025] [:error] [pid 23737:tid 23767] [client 35.243.180.100:54582] [client 35.243.180.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.git/config"] [unique_id "aRSd5hQUsVVfOZWgW_XucAAAAZI"]
[Wed Nov 12 22:50:54.560514 2025] [:error] [pid 23737:tid 23755] [client 173.239.224.37:20279] [client 173.239.224.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.37, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRSezhQUsVVfOZWgW_Xv0wAAAYY"]
[Wed Nov 12 23:43:59.899656 2025] [:error] [pid 12744:tid 12755] [client 173.239.224.24:42539] [client 173.239.224.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.24, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRSrP51cp_ouUvkFj0WjrgAAAQc"]
[Thu Nov 13 00:37:24.470377 2025] [:error] [pid 12744:tid 12752] [client 173.239.224.30:52487] [client 173.239.224.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.30, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRS3xJ1cp_ouUvkFj0WxTgAAAQQ"]
[Thu Nov 13 01:31:14.377761 2025] [:error] [pid 60095:tid 60105] [client 173.239.224.27:47655] [client 173.239.224.27] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.27, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRTEYnlw2elroagFF1p5RgAAAEY"]
[Thu Nov 13 02:25:11.249122 2025] [:error] [pid 60180:tid 60200] [client 173.239.224.28:57409] [client 173.239.224.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.28, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRTRB1hgd7ccS8EZg1qdkgAAAVI"]
[Thu Nov 13 03:19:21.744682 2025] [:error] [pid 60095:tid 60101] [client 173.239.224.32:42355] [client 173.239.224.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.32, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRTduXlw2elroagFF1qRcQAAAEI"]
[Thu Nov 13 04:14:08.957155 2025] [:error] [pid 51491:tid 51511] [client 173.239.224.19:53361] [client 173.239.224.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.19, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRTqkNQaME15TQuGVKThjwAAAM8"]
[Thu Nov 13 05:08:45.739648 2025] [:error] [pid 51406:tid 51460] [client 173.239.224.19:20653] [client 173.239.224.19] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.19, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRT3XXJ88_IXhWnPqG9sNQAAAFY"]
[Thu Nov 13 06:03:24.123258 2025] [:error] [pid 22224:tid 22302] [client 173.239.224.24:43841] [client 173.239.224.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.24, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRUELLuEVuTj3a_UBfAJGwAAAJY"]
[Thu Nov 13 06:57:07.752192 2025] [:error] [pid 22307:tid 22322] [client 173.239.224.42:40601] [client 173.239.224.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.42, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRUQw6r7fLMQQanZ_9yXFwAAAM0"]
[Thu Nov 13 07:43:10.359064 2025] [:error] [pid 22224:tid 22298] [client 36.111.67.189:44610] [client 36.111.67.189] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRUbjruEVuTj3a_UBfAkbgAAAJI"]
[Thu Nov 13 07:52:43.627601 2025] [:error] [pid 22566:tid 22576] [client 173.239.224.29:42993] [client 173.239.224.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.29, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRUdyzfdqWaUbu3e06-5NgAAAQg"]
[Thu Nov 13 08:22:13.663381 2025] [:error] [pid 22307:tid 22326] [client 195.178.110.242:57708] [client 195.178.110.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.env"] [unique_id "aRUktar7fLMQQanZ_9ysrwAAANE"]
[Thu Nov 13 08:22:13.672336 2025] [:error] [pid 22307:tid 22329] [client 195.178.110.242:57724] [client 195.178.110.242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.git/config"] [unique_id "aRUktar7fLMQQanZ_9yssAAAANQ"]
[Thu Nov 13 08:45:28.131325 2025] [:error] [pid 34451:tid 34460] [client 2.58.56.199:50808] [client 2.58.56.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/postnews.php"] [unique_id "aRUqKDRcD8KetQb4RarFegAAAUc"]
[Thu Nov 13 08:45:28.629839 2025] [:error] [pid 34451:tid 34468] [client 2.58.56.199:51066] [client 2.58.56.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/postnews.php"] [unique_id "aRUqKDRcD8KetQb4RarFfQAAAU8"]
[Thu Nov 13 08:45:29.127517 2025] [:error] [pid 22566:tid 22582] [client 2.58.56.199:51268] [client 2.58.56.199] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRUqKTfdqWaUbu3e06_HHQAAAQ4"]
[Thu Nov 13 08:48:22.208056 2025] [:error] [pid 22224:tid 22291] [client 173.239.224.38:34185] [client 173.239.224.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.38, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRUq1ruEVuTj3a_UBfA0uQAAAIs"]
[Thu Nov 13 09:44:05.740590 2025] [:error] [pid 32882:tid 32888] [client 173.239.224.39:64973] [client 173.239.224.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.39, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRU35ei5dxX_4ZQTqZsldQAAAQQ"]
[Thu Nov 13 10:39:33.849006 2025] [:error] [pid 62303:tid 62309] [client 173.239.224.42:59441] [client 173.239.224.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.42, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRVE5b-hlFTtVrZw8jA85QAAAII"]
[Thu Nov 13 10:59:33.462226 2025] [:error] [pid 62217:tid 62277] [client 43.135.145.77:54302] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRVJlRjGU3T9wKBmdNemcQAAAEM"]
[Thu Nov 13 11:34:56.244794 2025] [:error] [pid 62216:tid 62263] [client 173.239.224.29:42809] [client 173.239.224.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.29, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRVR4OpyFB9M2aVQhwO-aAAAABA"]
[Thu Nov 13 12:30:07.169353 2025] [:error] [pid 62217:tid 62289] [client 173.239.224.21:62065] [client 173.239.224.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.21, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRVezxjGU3T9wKBmdNfLPAAAAE8"]
[Thu Nov 13 13:26:17.644519 2025] [:error] [pid 6086:tid 6093] [client 173.239.224.40:60097] [client 173.239.224.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.40, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRVr-X9_6CRZzjZnAe29vgAAAQQ"]
[Thu Nov 13 13:49:25.493917 2025] [:error] [pid 62216:tid 62251] [client 175.6.217.4:54901] [client 175.6.217.4] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRVxZepyFB9M2aVQhwPtMQAAAAQ"]
[Thu Nov 13 14:22:16.460986 2025] [:error] [pid 62303:tid 62309] [client 173.239.224.34:33733] [client 173.239.224.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.34, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRV5GL-hlFTtVrZw8jChGQAAAII"]
[Thu Nov 13 15:15:59.816191 2025] [:error] [pid 62217:tid 62293] [client 173.239.224.34:45545] [client 173.239.224.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.34, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRWFrxjGU3T9wKBmdNcMDgAAAFM"]
[Thu Nov 13 16:09:52.032636 2025] [:error] [pid 62217:tid 62275] [client 173.239.224.28:35097] [client 173.239.224.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.28, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRWSUBjGU3T9wKBmdNcdxAAAAEE"]
[Thu Nov 13 17:04:03.695350 2025] [:error] [pid 62303:tid 62323] [client 173.239.224.40:37447] [client 173.239.224.40] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.40, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRWfA7-hlFTtVrZw8jDdwwAAAJA"]
[Thu Nov 13 17:55:43.603040 2025] [:error] [pid 44354:tid 44375] [client 150.241.107.255:56195] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRWrH3qKopQhy3G4s3l0aQAAAZA"]
[Thu Nov 13 17:55:44.149239 2025] [:error] [pid 62215:tid 62225] [client 150.241.107.255:56562] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRWrIEvClof1c6XaOBWsJQAAAMY"]
[Thu Nov 13 17:55:44.701932 2025] [:error] [pid 6086:tid 6089] [client 150.241.107.255:56766] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIH9_6CRZzjZnAe0zXQAAAQA"]
[Thu Nov 13 17:58:11.863376 2025] [:error] [pid 44245:tid 44267] [client 173.239.224.21:28525] [client 173.239.224.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.21, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRWrs4k7r-HKZdqw-dXQggAAAVA"]
[Thu Nov 13 18:51:59.723813 2025] [:error] [pid 44245:tid 44266] [client 173.239.224.24:35479] [client 173.239.224.24] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.24, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRW4T4k7r-HKZdqw-dXcYAAAAU8"]
[Thu Nov 13 19:43:44.385839 2025] [:error] [pid 62303:tid 62316] [client 173.239.224.21:64571] [client 173.239.224.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.21, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRXEcL-hlFTtVrZw8jD_AwAAAIk"]
[Thu Nov 13 20:20:54.119995 2025] [:error] [pid 44245:tid 44263] [client 49.7.227.204:44428] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRXNJok7r-HKZdqw-dXuAwAAAUw"]
[Thu Nov 13 20:36:46.224374 2025] [:error] [pid 44354:tid 44382] [client 173.239.224.35:39189] [client 173.239.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.35, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRXQ3nqKopQhy3G4s3mh3QAAAZc"]
[Thu Nov 13 21:29:56.012564 2025] [:error] [pid 4993:tid 5042] [client 173.239.224.32:25051] [client 173.239.224.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.32, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRXdVMl_cC0Js5xNCU07VQAAABA"]
[Thu Nov 13 22:23:19.155075 2025] [:error] [pid 4994:tid 5067] [client 173.239.224.35:39601] [client 173.239.224.35] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.35, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRXp1wVaYoYtjfBbabUYNgAAAI4"]
[Thu Nov 13 22:50:01.647047 2025] [:error] [pid 4993:tid 5035] [client 45.153.34.41:51300] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRXwGcl_cC0Js5xNCU1XNgAAAAk"]
[Thu Nov 13 22:51:44.179690 2025] [:error] [pid 4993:tid 5049] [client 45.138.16.29:60712] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/postnews.php"] [unique_id "aRXwgMl_cC0Js5xNCU1X4gAAABc"]
[Thu Nov 13 22:51:44.704951 2025] [:error] [pid 28868:tid 28879] [client 45.138.16.29:60793] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/postnews.php"] [unique_id "aRXwgIq9fgBJ6LAEEDzdBQAAAUk"]
[Thu Nov 13 22:51:45.230491 2025] [:error] [pid 4994:tid 5071] [client 45.138.16.29:60867] [client 45.138.16.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRXwgQVaYoYtjfBbabUf7AAAAJI"]
[Thu Nov 13 23:16:24.283321 2025] [:error] [pid 4992:tid 5005] [client 173.239.224.33:37387] [client 173.239.224.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.33, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRX2SCmsutP7nusdj-CcZwAAAMk"]
[Fri Nov 14 00:00:53.410309 2025] [:error] [pid 19872:tid 19893] [client 45.153.34.41:53244] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRYAtcusrN1b6ZJ_vbtE-AAAAFA"]
[Fri Nov 14 00:02:43.656163 2025] [:error] [pid 4993:tid 5036] [client 216.81.245.235:45446] [client 216.81.245.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRYBI8l_cC0Js5xNCU1v4wAAAAo"]
[Fri Nov 14 00:09:35.498913 2025] [:error] [pid 5086:tid 5096] [client 173.239.224.23:28735] [client 173.239.224.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.23, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aRYCvx_dsYLFCHw574jWCAAAAQc"]
[Fri Nov 14 02:56:51.884927 2025] [:error] [pid 9109:tid 9121] [client 125.94.144.102:44321] [client 125.94.144.102] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRYp845iBOowiCD1bSL1CQAAAQo"]
[Fri Nov 14 09:06:15.230919 2025] [:error] [pid 47154:tid 47172] [client 182.44.8.254:59494] [client 182.44.8.254] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRaAh0ijA13A3g3ATrKu0wAAAA0"]
[Fri Nov 14 12:10:00.285619 2025] [:error] [pid 16574:tid 16625] [client 43.153.119.119:59722] [client 43.153.119.119] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRarmP6XQqe4NqaoE9K8AwAAAJI"]
[Fri Nov 14 13:38:47.158373 2025] [:error] [pid 16575:tid 16641] [client 43.157.158.178:50874] [client 43.157.158.178] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRbAZ-6qT670YxigvbAukQAAAMc"]
[Fri Nov 14 18:12:14.075102 2025] [:error] [pid 16575:tid 16656] [client 43.153.35.128:35100] [client 43.153.35.128] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRcAfu6qT670YxigvbCH1AAAANY"]
[Fri Nov 14 19:35:15.451607 2025] [:error] [pid 16709:tid 16716] [client 170.106.192.3:53324] [client 170.106.192.3] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRcT86NdzfVNC4oipLWCLQAAAUU"]
[Fri Nov 14 20:32:06.075141 2025] [:error] [pid 16573:tid 16590] [client 146.190.162.1:57558] [client 146.190.162.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aRchRiPGexfUk9FDoELAnAAAAEw"]
[Fri Nov 14 20:32:06.408422 2025] [:error] [pid 1170:tid 1179] [client 146.190.162.1:60294] [client 146.190.162.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aRchRg5pkvzCDzzjItR4pAAAAAc"]
[Fri Nov 14 20:32:06.765349 2025] [:error] [pid 16575:tid 16657] [client 146.190.162.1:60343] [client 146.190.162.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aRchRu6qT670YxigvbCq8gAAANc"]
[Fri Nov 14 20:32:07.103732 2025] [:error] [pid 16575:tid 16646] [client 146.190.162.1:60370] [client 146.190.162.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aRchR-6qT670YxigvbCq8wAAAMw"]
[Fri Nov 14 21:58:19.033183 2025] [:error] [pid 16671:tid 16696] [client 182.42.105.144:52171] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRc1ezsoHwEAmeIzZXCa4wAAARM"]
[Sat Nov 15 00:07:24.650380 2025] [:error] [pid 16671:tid 16691] [client 43.157.46.118:36216] [client 43.157.46.118] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRdTvDsoHwEAmeIzZXDAZAAAAQ4"]
[Sat Nov 15 00:58:32.598115 2025] [:error] [pid 45909:tid 45973] [client 4.206.94.204:11151] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aRdfuMZqItrYybG86kiOxAAAAcg"]
[Sat Nov 15 00:58:33.010820 2025] [:error] [pid 45908:tid 45947] [client 4.206.94.204:11211] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aRdfuWWG19mWwZX7KatZCwAAAAk"]
[Sat Nov 15 00:58:33.427794 2025] [:error] [pid 18513:tid 18523] [client 4.206.94.204:11231] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aRdfufc94upQFzRWlUm3rgAAAEU"]
[Sat Nov 15 00:58:33.838805 2025] [:error] [pid 45995:tid 46015] [client 4.206.94.204:11207] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aRdfucfhZrb6EV4SvFu3ygAAAg8"]
[Sat Nov 15 01:28:13.091408 2025] [:error] [pid 45908:tid 45955] [client 43.130.9.111:33576] [client 43.130.9.111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRdmrWWG19mWwZX7KatirwAAABE"]
[Sat Nov 15 01:32:06.949000 2025] [:error] [pid 45995:tid 46011] [client 101.35.214.220:60788] [client 101.35.214.220] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/apps/admin/view/default/layui/images/face/11.gif"] [unique_id "aRdnlsfhZrb6EV4SvFvENAAAAgs"], referer: http://wendybinks.com/apps/admin/view/default/layui/images/face/11.gif
[Sat Nov 15 04:14:14.035697 2025] [:error] [pid 27910:tid 27952] [client 223.244.35.77:56441] [client 223.244.35.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aReNlo6e1LusHMYkS7Y1iwAAAEs"]
[Sat Nov 15 07:48:30.303125 2025] [:error] [pid 37318:tid 37379] [client 180.190.127.9:23873] [client 180.190.127.9] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.127.9, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aRe_zugM1rHoEAqoQDdkJAAAARE"]
[Sat Nov 15 10:36:11.768047 2025] [:error] [pid 27909:tid 27934] [client 119.96.24.54:38134] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRfnGyTfZ6B57n8HepXdkwAAABU"]
[Sat Nov 15 11:58:05.231951 2025] [:error] [pid 20313:tid 20320] [client 104.234.19.18:45467] [client 104.234.19.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/postnews.php"] [unique_id "aRf6TRI9DXIgPadBLUZQxAAAAsQ"]
[Sat Nov 15 11:58:05.722052 2025] [:error] [pid 27911:tid 27975] [client 136.144.19.210:34587] [client 136.144.19.210] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/postnews.php"] [unique_id "aRf6TcGzUdrhGBIfiKQkcwAAAIc"]
[Sat Nov 15 11:58:06.212162 2025] [:error] [pid 27997:tid 28015] [client 193.36.224.73:51351] [client 193.36.224.73] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRf6Ttpja_6cDxKbxFmMRQAAANA"]
[Sat Nov 15 12:09:28.445179 2025] [:error] [pid 22765:tid 22788] [client 138.197.23.42:56202] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRf8-KbrQzjuZmPIWDafTQAAApI"]
[Sat Nov 15 12:09:28.859945 2025] [:error] [pid 22613:tid 22615] [client 138.197.23.42:52525] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRf8-CoyR3cDsIRGPRl8pgAAAgA"]
[Sat Nov 15 12:09:29.278194 2025] [:error] [pid 27911:tid 27990] [client 138.197.23.42:52832] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRf8-cGzUdrhGBIfiKQmQQAAAJY"]
[Sat Nov 15 12:09:29.701132 2025] [:error] [pid 19959:tid 19975] [client 138.197.23.42:53126] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRf8-cjejiTUP1-IawOAYwAAAYk"]
[Sat Nov 15 12:09:30.121306 2025] [:error] [pid 22765:tid 22781] [client 138.197.23.42:60558] [client 138.197.23.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRf8-qbrQzjuZmPIWDafXgAAAos"]
[Sat Nov 15 20:16:18.973126 2025] [:error] [pid 20346:tid 20355] [client 45.138.16.215:55866] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/postnews.php"] [unique_id "aRhvEp7hsydZdIoVTltKxgAAAwY"]
[Sat Nov 15 20:16:19.506075 2025] [:error] [pid 27909:tid 27928] [client 45.138.16.215:55947] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/postnews.php"] [unique_id "aRhvEyTfZ6B57n8HepU8WwAAAA8"]
[Sat Nov 15 20:16:21.461381 2025] [:error] [pid 27997:tid 28011] [client 45.138.16.215:56217] [client 45.138.16.215] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/postnews.php"] [unique_id "aRhvFdpja_6cDxKbxFnprwAAAMw"]
[Sat Nov 15 20:26:28.296039 2025] [:error] [pid 20346:tid 20362] [client 45.134.79.103:64172] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRhxdJ7hsydZdIoVTltM1wAAAw0"]
[Sat Nov 15 20:26:28.956238 2025] [:error] [pid 20313:tid 20334] [client 45.134.79.103:64346] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRhxdBI9DXIgPadBLUaeRwAAAtI"]
[Sat Nov 15 20:26:29.597537 2025] [:error] [pid 19959:tid 19981] [client 45.134.79.103:64496] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRhxdcjejiTUP1-IawPtzAAAAY8"]
[Sat Nov 15 23:47:47.495539 2025] [:error] [pid 20346:tid 20372] [client 182.42.104.32:52723] [client 182.42.104.32] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRigo57hsydZdIoVTltxXQAAAxc"]
[Sun Nov 16 03:07:38.379646 2025] [autoindex:error] [pid 22613:tid 22639] [client 20.2.83.141:57893] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Nov 16 07:20:35.030458 2025] [:error] [pid 20556:tid 20570] [client 43.159.149.216:41526] [client 43.159.149.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRkKw0kbyEckbWtBcCK3MwAAAQw"]
[Sun Nov 16 11:52:39.101979 2025] [:error] [pid 52471:tid 52546] [client 147.182.149.75:46360] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRlKh9mWsFzjR5CEgDUALwAAAI4"]
[Sun Nov 16 11:52:39.744266 2025] [:error] [pid 52469:tid 52489] [client 147.182.149.75:46368] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/server"] [unique_id "aRlKh06HaXpHeEZ98Z1cwgAAAAw"]
[Sun Nov 16 11:52:40.387266 2025] [:error] [pid 52469:tid 52501] [client 147.182.149.75:46370] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/.vscode/sftp.json"] [unique_id "aRlKiE6HaXpHeEZ98Z1cxgAAABg"]
[Sun Nov 16 11:52:41.028400 2025] [:error] [pid 52563:tid 52590] [client 147.182.149.75:46384] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/about"] [unique_id "aRlKic-l3ey-hVJ5Auta-AAAANg"]
[Sun Nov 16 11:52:41.670858 2025] [:error] [pid 52469:tid 52477] [client 147.182.149.75:46386] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/debug/default/view"] [unique_id "aRlKiU6HaXpHeEZ98Z1czAAAAAA"]
[Sun Nov 16 11:52:42.314301 2025] [:error] [pid 52563:tid 52585] [client 147.182.149.75:46400] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/v2/_catalog"] [unique_id "aRlKis-l3ey-hVJ5Auta-wAAANM"]
[Sun Nov 16 11:52:42.957766 2025] [:error] [pid 20556:tid 20571] [client 147.182.149.75:46412] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRlKikkbyEckbWtBcCIaoAAAAQ0"]
[Sun Nov 16 11:52:43.599051 2025] [:error] [pid 52470:tid 52527] [client 147.182.149.75:46426] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/server-status"] [unique_id "aRlKi0g9mXF2ZFFtj1UkbAAAAFY"]
[Sun Nov 16 11:52:44.240808 2025] [:error] [pid 20556:tid 20569] [client 147.182.149.75:46442] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/login.action"] [unique_id "aRlKjEkbyEckbWtBcCIapQAAAQs"]
[Sun Nov 16 11:52:44.884948 2025] [:error] [pid 52471:tid 52539] [client 147.182.149.75:46444] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/_all_dbs"] [unique_id "aRlKjNmWsFzjR5CEgDUAPgAAAIc"]
[Sun Nov 16 11:52:45.550919 2025] [:error] [pid 20556:tid 20567] [client 147.182.149.75:46460] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/.DS_Store"] [unique_id "aRlKjUkbyEckbWtBcCIapwAAAQk"]
[Sun Nov 16 11:52:46.192015 2025] [:error] [pid 52470:tid 52507] [client 147.182.149.75:46472] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.env"] [unique_id "aRlKjkg9mXF2ZFFtj1UkbgAAAEI"]
[Sun Nov 16 11:52:46.834237 2025] [:error] [pid 52469:tid 52480] [client 147.182.149.75:46484] [client 147.182.149.75] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.git/config"] [unique_id "aRlKjk6HaXpHeEZ98Z1c1AAAAAM"]
[Sun Nov 16 11:52:47.475047 2025] [:error] [pid 52469:tid 52482] [client 147.182.149.75:46488] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRlKj06HaXpHeEZ98Z1c1wAAAAU"]
[Sun Nov 16 11:52:48.117045 2025] [:error] [pid 52563:tid 52589] [client 147.182.149.75:46498] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/config.json"] [unique_id "aRlKkM-l3ey-hVJ5AutbBAAAANc"]
[Sun Nov 16 11:52:48.758750 2025] [:error] [pid 52470:tid 52521] [client 147.182.149.75:39148] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/telescope/requests"] [unique_id "aRlKkEg9mXF2ZFFtj1UkcAAAAFA"]
[Sun Nov 16 11:52:49.399855 2025] [:error] [pid 52563:tid 52585] [client 147.182.149.75:39152] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/info.php"] [unique_id "aRlKkc-l3ey-hVJ5AutbCAAAANM"]
[Sun Nov 16 11:52:50.040631 2025] [:error] [pid 20556:tid 20567] [client 147.182.149.75:39160] [client 147.182.149.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRlKkkkbyEckbWtBcCIasQAAAQk"]
[Sun Nov 16 13:19:05.277229 2025] [:error] [pid 34227:tid 34231] [client 167.99.181.249:49864] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aRleyX108zGLYs9eMugBFwAAAgI"]
[Sun Nov 16 13:19:06.007831 2025] [:error] [pid 34164:tid 34186] [client 167.99.181.249:49876] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/server"] [unique_id "aRleyu93ccBCLD8-Q4YGsgAAAZI"]
[Sun Nov 16 13:19:06.751114 2025] [:error] [pid 34271:tid 34278] [client 167.99.181.249:49888] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.vscode/sftp.json"] [unique_id "aRleykNmlZhoZZV1BUCDXgAAAkU"]
[Sun Nov 16 13:19:07.392402 2025] [:error] [pid 34301:tid 34326] [client 167.99.181.249:49904] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about"] [unique_id "aRley7GPoZwUGuFNREuPXAAAApY"]
[Sun Nov 16 13:19:08.034022 2025] [:error] [pid 34301:tid 34319] [client 167.99.181.249:49908] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/debug/default/view"] [unique_id "aRlezLGPoZwUGuFNREuPXgAAAo8"]
[Sun Nov 16 13:19:08.679359 2025] [:error] [pid 34165:tid 34218] [client 167.99.181.249:47968] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/v2/_catalog"] [unique_id "aRlezHhG2YTKEjXchwnxjgAAAdc"]
[Sun Nov 16 13:19:09.321749 2025] [:error] [pid 34164:tid 34180] [client 167.99.181.249:47972] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aRleze93ccBCLD8-Q4YGtAAAAYw"]
[Sun Nov 16 13:19:09.962079 2025] [:error] [pid 34165:tid 34201] [client 167.99.181.249:47984] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/server-status"] [unique_id "aRlezXhG2YTKEjXchwnxkAAAAcY"]
[Sun Nov 16 13:19:10.604079 2025] [:error] [pid 34164:tid 34174] [client 167.99.181.249:47988] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/login.action"] [unique_id "aRlezu93ccBCLD8-Q4YGtQAAAYY"]
[Sun Nov 16 13:19:11.245970 2025] [:error] [pid 34227:tid 34240] [client 167.99.181.249:47992] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/_all_dbs"] [unique_id "aRlez3108zGLYs9eMugBHQAAAgs"]
[Sun Nov 16 13:19:11.886746 2025] [:error] [pid 34227:tid 34230] [client 167.99.181.249:47998] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.DS_Store"] [unique_id "aRlez3108zGLYs9eMugBHwAAAgE"]
[Sun Nov 16 13:19:12.526799 2025] [:error] [pid 34164:tid 34181] [client 167.99.181.249:48006] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.env"] [unique_id "aRle0O93ccBCLD8-Q4YGuAAAAY0"]
[Sun Nov 16 13:19:13.180936 2025] [:error] [pid 52469:tid 52489] [client 167.99.181.249:48010] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRle0U6HaXpHeEZ98Z10BAAAAAw"]
[Sun Nov 16 13:19:13.822177 2025] [:error] [pid 34164:tid 34168] [client 167.99.181.249:48014] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aRle0e93ccBCLD8-Q4YGvQAAAYA"]
[Sun Nov 16 13:19:14.463599 2025] [:error] [pid 52563:tid 52587] [client 167.99.181.249:48026] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/config.json"] [unique_id "aRle0s-l3ey-hVJ5Autu7AAAANU"]
[Sun Nov 16 13:19:15.106780 2025] [:error] [pid 20556:tid 20558] [client 167.99.181.249:48030] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/telescope/requests"] [unique_id "aRle00kbyEckbWtBcCI1VgAAAQA"]
[Sun Nov 16 13:19:15.748858 2025] [:error] [pid 34271:tid 34281] [client 167.99.181.249:48044] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/info.php"] [unique_id "aRle00NmlZhoZZV1BUCDawAAAkg"]
[Sun Nov 16 13:19:16.390340 2025] [:error] [pid 34227:tid 34253] [client 167.99.181.249:48050] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRle1H108zGLYs9eMugBIQAAAhg"]
[Sun Nov 16 14:43:49.131992 2025] [:error] [pid 34227:tid 34231] [client 43.166.250.187:57282] [client 43.166.250.187] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRlypX108zGLYs9eMugPiwAAAgI"]
[Sun Nov 16 16:20:52.847863 2025] [:error] [pid 34164:tid 34189] [client 43.130.12.43:39250] [client 43.130.12.43] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRmJZO93ccBCLD8-Q4Yy5AAAAZU"]
[Sun Nov 16 19:11:31.306025 2025] [autoindex:error] [pid 34271:tid 34281] [client 155.94.163.116:62359] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Mon Nov 17 16:53:14.897853 2025] [:error] [pid 65302:tid 65308] [client 212.11.64.45:32976] [client 212.11.64.45] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRriegPMSx2v85r8y7zjLwAAAUQ"]
[Mon Nov 17 16:53:16.812175 2025] [:error] [pid 31419:tid 31442] [client 212.11.64.45:32994] [client 212.11.64.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/favicon.ico"] [unique_id "aRrifAHQ5Sbp7elmDZhwuQAAApU"]
[Mon Nov 17 16:53:17.325655 2025] [:error] [pid 15888:tid 15899] [client 212.11.64.45:33008] [client 212.11.64.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/images/favicon.ico"] [unique_id "aRrifQjAdDTBm4W3qW0awAAAAcg"]
[Mon Nov 17 19:51:46.018109 2025] [:error] [pid 39451:tid 39522] [client 43.135.145.73:38908] [client 43.135.145.73] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRsMUufgkqXTS0SO3fAhtQAAAI4"]
[Mon Nov 17 20:01:59.707402 2025] [:error] [pid 32753:tid 32764] [client 103.186.31.45:59039] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/style.php"] [unique_id "aRsOt06YNqI5vkht922EBAAAA8g"]
[Mon Nov 17 20:02:01.443472 2025] [:error] [pid 30801:tid 30822] [client 103.186.31.45:59627] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/style.php"] [unique_id "aRsOuTbGAU49DhMTBD7wVgAAAlM"]
[Mon Nov 17 20:02:01.683746 2025] [:error] [pid 39537:tid 39555] [client 103.186.31.45:59681] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/themes/style.php"] [unique_id "aRsOuYZRrh1pcrdcLB-9xAAAAM8"]
[Mon Nov 17 20:02:01.928463 2025] [:error] [pid 15888:tid 15907] [client 103.186.31.45:59837] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/style.php"] [unique_id "aRsOuQjAdDTBm4W3qW03_QAAAdA"]
[Mon Nov 17 20:02:02.170698 2025] [:error] [pid 39449:tid 39461] [client 103.186.31.45:59886] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style.php"] [unique_id "aRsOuqUCymTA3MDfzLNcaQAAAAc"]
[Mon Nov 17 20:02:02.421605 2025] [:error] [pid 32753:tid 32770] [client 103.186.31.45:59940] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/chosen.php"] [unique_id "aRsOuk6YNqI5vkht922ERwAAA84"]
[Mon Nov 17 20:02:02.673766 2025] [:error] [pid 32753:tid 32765] [client 103.186.31.45:59994] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/file.php"] [unique_id "aRsOuk6YNqI5vkht922ESQAAA8k"]
[Mon Nov 17 20:02:02.929525 2025] [:error] [pid 32753:tid 32763] [client 103.186.31.45:60051] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/flower.php"] [unique_id "aRsOuk6YNqI5vkht922ETQAAA8c"]
[Mon Nov 17 20:02:03.198746 2025] [:error] [pid 65302:tid 65325] [client 103.186.31.45:60145] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/gifclass.php"] [unique_id "aRsOuwPMSx2v85r8y7wETQAAAVU"]
[Mon Nov 17 20:02:03.446360 2025] [:error] [pid 39451:tid 39512] [client 103.186.31.45:60191] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/bless.php"] [unique_id "aRsOu-fgkqXTS0SO3fAjAwAAAIQ"]
[Mon Nov 17 20:02:03.693125 2025] [:error] [pid 65302:tid 65323] [client 103.186.31.45:60231] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/class-t.api.php"] [unique_id "aRsOuwPMSx2v85r8y7wEVQAAAVM"]
[Mon Nov 17 20:02:03.936706 2025] [:error] [pid 31419:tid 31427] [client 103.186.31.45:60274] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/blurbs.php"] [unique_id "aRsOuwHQ5Sbp7elmDZiZGgAAAoY"]
[Mon Nov 17 20:02:04.187779 2025] [:error] [pid 39451:tid 39510] [client 103.186.31.45:60320] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/akcc.php"] [unique_id "aRsOvOfgkqXTS0SO3fAjBgAAAII"]
[Mon Nov 17 20:02:04.445243 2025] [:error] [pid 15888:tid 15915] [client 103.186.31.45:60400] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/abcd.php"] [unique_id "aRsOvAjAdDTBm4W3qW04EQAAAdg"]
[Mon Nov 17 20:02:04.697854 2025] [:error] [pid 30801:tid 30818] [client 103.186.31.45:60445] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/shelp.php"] [unique_id "aRsOvDbGAU49DhMTBD7wXwAAAk8"]
[Mon Nov 17 20:02:04.941689 2025] [:error] [pid 39451:tid 39516] [client 103.186.31.45:60483] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/cord.php"] [unique_id "aRsOvOfgkqXTS0SO3fAjBwAAAIg"]
[Mon Nov 17 20:02:05.189939 2025] [:error] [pid 15888:tid 15901] [client 103.186.31.45:60525] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/dex.php"] [unique_id "aRsOvQjAdDTBm4W3qW04EwAAAco"]
[Mon Nov 17 20:02:05.434081 2025] [:error] [pid 31419:tid 31433] [client 103.186.31.45:60568] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aRsOvQHQ5Sbp7elmDZiZIgAAAow"]
[Mon Nov 17 20:02:05.686070 2025] [:error] [pid 39537:tid 39556] [client 103.186.31.45:60617] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/file2.php"] [unique_id "aRsOvYZRrh1pcrdcLB-93QAAANA"]
[Mon Nov 17 20:02:05.933790 2025] [:error] [pid 39537:tid 39550] [client 103.186.31.45:60646] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/zwso.php"] [unique_id "aRsOvYZRrh1pcrdcLB-94QAAAMo"]
[Mon Nov 17 20:02:06.178761 2025] [:error] [pid 30801:tid 30814] [client 103.186.31.45:60692] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/zwso.php"] [unique_id "aRsOvjbGAU49DhMTBD7wZAAAAks"]
[Mon Nov 17 20:02:06.423737 2025] [:error] [pid 39451:tid 39530] [client 103.186.31.45:60752] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "aRsOvufgkqXTS0SO3fAjEQAAAJY"]
[Mon Nov 17 20:02:06.683362 2025] [:error] [pid 39451:tid 39517] [client 103.186.31.45:60791] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/bolt.php"] [unique_id "aRsOvufgkqXTS0SO3fAjEwAAAIk"]
[Mon Nov 17 20:02:06.938671 2025] [:error] [pid 20913:tid 20931] [client 103.186.31.45:60831] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/shlo.php"] [unique_id "aRsOvukafGNeN3nY1bdbbgAAA1A"]
[Mon Nov 17 20:02:07.193792 2025] [:error] [pid 15888:tid 15914] [client 103.186.31.45:60868] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/133.php"] [unique_id "aRsOvwjAdDTBm4W3qW04FwAAAdc"]
[Mon Nov 17 20:02:07.450686 2025] [:error] [pid 39451:tid 39527] [client 103.186.31.45:60906] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/ahax.php"] [unique_id "aRsOv-fgkqXTS0SO3fAjFwAAAJM"]
[Mon Nov 17 20:02:07.698994 2025] [:error] [pid 39537:tid 39553] [client 103.186.31.45:60934] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/php8.php"] [unique_id "aRsOv4ZRrh1pcrdcLB-96QAAAM0"]
[Mon Nov 17 20:02:07.952294 2025] [:error] [pid 65302:tid 65325] [client 103.186.31.45:60963] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/lufix1.php"] [unique_id "aRsOvwPMSx2v85r8y7wEYgAAAVU"]
[Mon Nov 17 20:02:08.201877 2025] [:error] [pid 32753:tid 32768] [client 103.186.31.45:61000] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/witmm.php"] [unique_id "aRsOwE6YNqI5vkht922EbQAAA8w"]
[Mon Nov 17 20:02:08.457088 2025] [:error] [pid 20913:tid 20929] [client 103.186.31.45:61025] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/css/index.php"] [unique_id "aRsOwOkafGNeN3nY1bdbdgAAA04"]
[Mon Nov 17 20:02:08.703193 2025] [:error] [pid 31419:tid 31429] [client 103.186.31.45:61054] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/index.php"] [unique_id "aRsOwAHQ5Sbp7elmDZiZKQAAAog"]
[Mon Nov 17 20:02:08.947096 2025] [:error] [pid 30801:tid 30806] [client 103.186.31.45:61097] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/index.php"] [unique_id "aRsOwDbGAU49DhMTBD7wbAAAAkM"]
[Mon Nov 17 20:02:09.195457 2025] [:error] [pid 30801:tid 30823] [client 103.186.31.45:61132] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aRsOwTbGAU49DhMTBD7wbgAAAlQ"]
[Mon Nov 17 20:02:09.444798 2025] [:error] [pid 30801:tid 30821] [client 103.186.31.45:61168] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/222.php"] [unique_id "aRsOwTbGAU49DhMTBD7wbwAAAlI"]
[Mon Nov 17 20:02:09.689308 2025] [:error] [pid 32753:tid 32778] [client 103.186.31.45:61191] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/files.php"] [unique_id "aRsOwU6YNqI5vkht922EbwAAA9Y"]
[Mon Nov 17 20:02:09.930805 2025] [:error] [pid 32753:tid 32757] [client 103.186.31.45:61217] [client 103.186.31.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-editor.php"] [unique_id "aRsOwU6YNqI5vkht922EcQAAA8E"]
[Mon Nov 17 21:29:36.568527 2025] [:error] [pid 39449:tid 39463] [client 58.49.233.126:37899] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRsjQKUCymTA3MDfzLNsaAAAAAk"]
[Tue Nov 18 03:29:11.794231 2025] [:error] [pid 39762:tid 39783] [client 178.128.124.134:56082] [client 178.128.124.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/sftp-config.json"] [unique_id "aRt3h5WSJFResg9YHzgWuwAAAM8"]
[Tue Nov 18 04:36:37.000390 2025] [:error] [pid 61482:tid 61511] [client 43.135.144.126:57840] [client 43.135.144.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRuHVPtNHsWZClVWav4wAgAAANg"]
[Tue Nov 18 06:56:54.096045 2025] [:error] [pid 61482:tid 61507] [client 101.33.66.34:60626] [client 101.33.66.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRuoNvtNHsWZClVWav5ZwQAAANQ"]
[Tue Nov 18 09:52:36.918309 2025] [:error] [pid 28635:tid 28645] [client 180.102.134.69:38045] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRvRZGB61AnWhG54Xz3jtQAAAcc"]
[Tue Nov 18 14:20:36.038145 2025] [:error] [pid 44560:tid 44582] [client 134.199.154.18:52104] [client 134.199.154.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRwQNAnbP7etF3q5-5s-tAAAAMs"]
[Tue Nov 18 14:20:36.117242 2025] [:error] [pid 44471:tid 44520] [client 134.199.154.18:43638] [client 134.199.154.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRwQNO_6m0bQO14XwtMK0AAAARA"]
[Tue Nov 18 16:27:21.182357 2025] [autoindex:error] [pid 44472:tid 44542] [client 84.247.191.22:65432] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Nov 18 17:23:36.804941 2025] [:error] [pid 44472:tid 44552] [client 134.199.154.18:51390] [client 134.199.154.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRw7GIKhGwkiLjv8BQzYsgAAAVU"]
[Tue Nov 18 17:23:36.872651 2025] [:error] [pid 1387:tid 1412] [client 134.199.154.18:44046] [client 134.199.154.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aRw7GEzBvalKyx3hMvVO3gAAABM"]
[Tue Nov 18 21:37:31.936468 2025] [:error] [pid 3500:tid 3522] [client 45.134.79.103:62717] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRx2m_CbRC7k2D7mjbST2AAAAdQ"]
[Tue Nov 18 21:37:32.588897 2025] [:error] [pid 57578:tid 57597] [client 45.134.79.103:54517] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aRx2nD9_jVUQm7Io75ML4QAAAJE"]
[Tue Nov 18 21:37:33.247538 2025] [:error] [pid 3500:tid 3508] [client 45.134.79.103:59453] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2nfCbRC7k2D7mjbST9wAAAcY"]
[Wed Nov 19 05:10:56.982236 2025] [:error] [pid 6554:tid 6578] [client 182.42.105.85:39174] [client 182.42.105.85] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aRzg4N8rvPWLafJFqmUk3gAAABI"]
[Wed Nov 19 07:30:40.364669 2025] [:error] [pid 26664:tid 26688] [client 18.191.165.250:56938] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR0BoIpWc1yoj2P7MeASGwAAAVQ"]
[Wed Nov 19 07:30:40.761532 2025] [:error] [pid 26664:tid 26671] [client 18.191.165.250:57080] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR0BoIpWc1yoj2P7MeASKwAAAUQ"]
[Wed Nov 19 07:30:41.157511 2025] [:error] [pid 6919:tid 6925] [client 18.191.165.250:57194] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR0BoUYFdN1s_9xJVUmrbwAAAQM"]
[Wed Nov 19 07:30:41.552279 2025] [:error] [pid 6555:tid 6606] [client 18.191.165.250:57282] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR0BoUbVJm8eMsGMTCON-wAAAE8"]
[Wed Nov 19 07:30:41.947981 2025] [:error] [pid 26664:tid 26676] [client 18.191.165.250:57372] [client 18.191.165.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR0BoYpWc1yoj2P7MeASUQAAAUk"]
[Wed Nov 19 13:02:07.168365 2025] [:error] [pid 26664:tid 26676] [client 43.159.141.150:58432] [client 43.159.141.150] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR1PT4pWc1yoj2P7MeCwxQAAAUk"]
[Wed Nov 19 15:24:48.368422 2025] [:error] [pid 12673:tid 12706] [client 154.57.218.137:41058] [client 154.57.218.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.218.137, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR1wwMab1F0fb062dH0q9AAAAgI"]
[Wed Nov 19 15:53:00.213955 2025] [:error] [pid 12643:tid 12662] [client 154.57.218.137:40102] [client 154.57.218.137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wendybinks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wendybinks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aR13XMaLCNSdLHNAGt7IbwAAAZA"]
[Wed Nov 19 15:54:15.454756 2025] [:error] [pid 6556:tid 6628] [client 154.57.218.137:40967] [client 154.57.218.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.218.137, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR13p5uL7hhgrmdM1mv8GQAAAIo"]
[Wed Nov 19 15:55:24.144941 2025] [:error] [pid 6919:tid 6931] [client 154.57.218.137:39781] [client 154.57.218.137] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.218.137, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR137EYFdN1s_9xJVUlOUQAAAQk"]
[Wed Nov 19 17:35:25.490627 2025] [:error] [pid 12672:tid 12677] [client 203.2.64.59:51148] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aR2PXf9vojl6X1cc5mUGNwAAAcA"]
[Wed Nov 19 20:35:58.528960 2025] [:error] [pid 6919:tid 6939] [client 104.196.176.201:57707] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/media/system/js/core.js"] [unique_id "aR25rkYFdN1s_9xJVUmBjAAAARE"]
[Wed Nov 19 21:14:05.818713 2025] [:error] [pid 26664:tid 26676] [client 94.247.172.129:50042] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aR3CnYpWc1yoj2P7MeAJ6QAAAUk"]
[Thu Nov 20 00:03:00.176776 2025] [:error] [pid 6919:tid 6929] [client 203.33.203.148:59624] [client 203.33.203.148] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR3qNEYFdN1s_9xJVUmjIgAAAQc"]
[Thu Nov 20 02:20:25.401626 2025] [:error] [pid 50210:tid 50329] [client 91.92.242.56:55031] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aR4Kad9KVfTGhSw-ebu_NQAAABc"]
[Thu Nov 20 02:20:25.963891 2025] [:error] [pid 7924:tid 7950] [client 91.92.242.56:58366] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aR4KaaGUpXw1x9m1v_BMRwAAAVg"]
[Thu Nov 20 02:20:26.528460 2025] [:error] [pid 8293:tid 8295] [client 91.92.242.56:58669] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wc-fields-factory/readme.txt"] [unique_id "aR4KaiGLhDa8A92KWiIJygAAAkA"]
[Thu Nov 20 02:20:30.180853 2025] [:error] [pid 50210:tid 50327] [client 91.92.242.56:58988] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/user-registration-pro/readme.txt"] [unique_id "aR4Kbt9KVfTGhSw-ebu_PwAAABU"]
[Thu Nov 20 02:20:30.743285 2025] [:error] [pid 7924:tid 7927] [client 91.92.242.56:61055] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/user-registration-pro/readme.txt"] [unique_id "aR4KbqGUpXw1x9m1v_BMTQAAAUE"]
[Thu Nov 20 02:20:31.305654 2025] [:error] [pid 8195:tid 8203] [client 91.92.242.56:61399] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/user-registration-pro/readme.txt"] [unique_id "aR4Kbys33_quRYR1WMav8gAAAgY"]
[Thu Nov 20 02:20:31.871758 2025] [:error] [pid 50475:tid 50536] [client 91.92.242.56:61721] [client 91.92.242.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/user-registration-pro/readme.txt"] [unique_id "aR4Kb1zRy2BTBjqrUmk2lAAAAQ4"]
[Thu Nov 20 08:32:52.431706 2025] [:error] [pid 55343:tid 55403] [client 34.148.127.4:42772] [client 34.148.127.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aR5htFWlO3EnyVMV7w4j9AAAAIQ"]
[Thu Nov 20 09:00:00.963843 2025] [autoindex:error] [pid 55343:tid 55399] [client 52.232.251.12:3996] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 20 09:00:04.108727 2025] [autoindex:error] [pid 55343:tid 55406] [client 52.232.251.12:3996] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 09:00:10.661736 2025] [autoindex:error] [pid 55343:tid 55417] [client 52.232.251.12:3996] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 09:00:18.318430 2025] [:error] [pid 55343:tid 55410] [client 52.232.251.12:3996] [client 52.232.251.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 52.232.251.12, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR5oIlWlO3EnyVMV7w4uYQAAAIs"], referer: https://www.google.fr/
[Thu Nov 20 09:00:32.827852 2025] [:error] [pid 55343:tid 55419] [client 52.232.251.12:3996] [client 52.232.251.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "wendybinks.com"] [uri "/filemanager.php"] [unique_id "aR5oMFWlO3EnyVMV7w4ufQAAAJQ"], referer: https://www.google.de/
[Thu Nov 20 09:00:57.181281 2025] [:error] [pid 34444:tid 34457] [client 52.232.251.12:5441] [client 52.232.251.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR5oSVNEol4jlmmA_GPFdQAAAUs"], referer: https://duckduckgo.com/
[Thu Nov 20 09:01:03.997415 2025] [autoindex:error] [pid 34444:tid 34446] [client 52.232.251.12:2959] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 09:01:06.898005 2025] [autoindex:error] [pid 34444:tid 34468] [client 52.232.251.12:2959] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.yahoo.com/
[Thu Nov 20 09:01:07.263845 2025] [autoindex:error] [pid 34444:tid 34456] [client 52.232.251.12:2959] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.com/
[Thu Nov 20 09:01:16.146282 2025] [autoindex:error] [pid 34444:tid 34456] [client 52.232.251.12:2959] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 09:01:16.364934 2025] [autoindex:error] [pid 34444:tid 34449] [client 52.232.251.12:2959] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 09:01:16.574962 2025] [autoindex:error] [pid 34444:tid 34464] [client 52.232.251.12:2959] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Thu Nov 20 09:01:16.785827 2025] [:error] [pid 34444:tid 34454] [client 52.232.251.12:2959] [client 52.232.251.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR5oXFNEol4jlmmA_GPFlQAAAUg"], referer: https://www.google.fr/
[Thu Nov 20 09:01:18.773759 2025] [autoindex:error] [pid 34405:tid 34419] [client 52.232.251.12:3163] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/crop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://duckduckgo.com/
[Thu Nov 20 09:01:18.988251 2025] [autoindex:error] [pid 34405:tid 34415] [client 52.232.251.12:3163] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.de/
[Thu Nov 20 09:01:19.200619 2025] [autoindex:error] [pid 34405:tid 34420] [client 52.232.251.12:3163] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.bing.com/
[Thu Nov 20 09:01:44.867422 2025] [:error] [pid 34405:tid 34414] [client 52.232.251.12:3163] [client 52.232.251.12] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 52.232.251.12, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR5oeDFpvu8oRK7ATfuhggAAAQc"], referer: https://www.google.de/
[Thu Nov 20 10:36:35.272900 2025] [:error] [pid 55430:tid 55439] [client 103.211.135.101:20886] [client 103.211.135.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.135.101, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR5-s_PZXaIMEU4pE7uKwAAAAMY"]
[Thu Nov 20 10:39:23.790102 2025] [:error] [pid 55430:tid 55438] [client 103.211.135.101:20209] [client 103.211.135.101] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wendybinks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wendybinks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aR5_W_PZXaIMEU4pE7uLTAAAAMU"]
[Thu Nov 20 10:40:34.918231 2025] [:error] [pid 55342:tid 55373] [client 103.211.135.101:20148] [client 103.211.135.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.135.101, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR5_org6x32Tvk7fIG97ZgAAAEE"]
[Thu Nov 20 10:41:33.176075 2025] [:error] [pid 804:tid 808] [client 103.211.135.101:19550] [client 103.211.135.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.135.101, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR5_3faRHpUlPL9O0LklhgAAAYI"]
[Thu Nov 20 10:42:09.867033 2025] [:error] [pid 55340:tid 55359] [client 118.185.152.169:12974] [client 118.185.152.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.185.152.169, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR6AAfOxD-NeMydTybAq0QAAAA4"]
[Thu Nov 20 12:10:22.946893 2025] [:error] [pid 34405:tid 34418] [client 98.81.111.26:53946] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6UrjFpvu8oRK7ATfvJTgAAAQs"]
[Thu Nov 20 12:10:23.357018 2025] [:error] [pid 55342:tid 55392] [client 98.81.111.26:53961] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6Ur7g6x32Tvk7fIG-MFwAAAFQ"]
[Thu Nov 20 12:10:23.827740 2025] [:error] [pid 55430:tid 55445] [client 98.81.111.26:59660] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6Ur_PZXaIMEU4pE7uhHAAAAMw"]
[Thu Nov 20 12:10:24.242184 2025] [:error] [pid 55430:tid 55438] [client 98.81.111.26:49777] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6UsPPZXaIMEU4pE7uhSQAAAMU"]
[Thu Nov 20 12:10:24.653060 2025] [:error] [pid 34444:tid 34459] [client 98.81.111.26:53965] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6UsFNEol4jlmmA_GPxKgAAAU0"]
[Thu Nov 20 12:15:53.309991 2025] [:error] [pid 55340:tid 55351] [client 98.81.111.26:50519] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6V-fOxD-NeMydTybBNigAAAAY"]
[Thu Nov 20 12:15:53.715374 2025] [:error] [pid 55343:tid 55409] [client 98.81.111.26:52546] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6V-VWlO3EnyVMV7w5o8wAAAIo"]
[Thu Nov 20 12:15:54.125063 2025] [:error] [pid 34405:tid 34427] [client 98.81.111.26:55130] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6V-jFpvu8oRK7ATfvNSwAAARQ"]
[Thu Nov 20 12:15:54.531884 2025] [:error] [pid 55342:tid 55376] [client 98.81.111.26:58415] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6V-rg6x32Tvk7fIG-PXgAAAEQ"]
[Thu Nov 20 12:15:54.941051 2025] [:error] [pid 804:tid 838] [client 98.81.111.26:61058] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6V-vaRHpUlPL9O0Lk5fgAAAY4"]
[Thu Nov 20 12:24:24.868658 2025] [:error] [pid 34405:tid 34412] [client 58.49.233.126:59425] [client 58.49.233.126] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR6X-DFpvu8oRK7ATfvP1QAAAQU"]
[Thu Nov 20 13:51:52.549715 2025] [:error] [pid 55343:tid 55415] [client 85.8.130.64:32979] [client 85.8.130.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.64, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR6seFWlO3EnyVMV7w6CxAAAAJA"]
[Thu Nov 20 16:00:21.424780 2025] [:error] [pid 55342:tid 55372] [client 118.185.152.169:45627] [client 118.185.152.169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wendybinks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wendybinks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aR7Klbg6x32Tvk7fIG-7DQAAAEA"]
[Thu Nov 20 16:01:29.519910 2025] [:error] [pid 40415:tid 40418] [client 118.185.152.169:46401] [client 118.185.152.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.185.152.169, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR7K2ahjIyLSv09svwOByQAAAcA"]
[Thu Nov 20 16:02:38.078180 2025] [:error] [pid 40508:tid 40515] [client 118.185.152.169:1503] [client 118.185.152.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.185.152.169, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR7LHqxXNVCMW_ksxPttdwAAAoU"]
[Thu Nov 20 16:03:46.357060 2025] [:error] [pid 34405:tid 34411] [client 118.185.152.169:12543] [client 118.185.152.169] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 118.185.152.169, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aR7LYjFpvu8oRK7ATfv58gAAAQQ"]
[Thu Nov 20 17:05:11.167196 2025] [:error] [pid 40415:tid 40427] [client 216.24.219.152:35561] [client 216.24.219.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/style.php"] [unique_id "aR7Zx6hjIyLSv09svwOPtAAAAck"]
[Thu Nov 20 17:05:11.805068 2025] [:error] [pid 40415:tid 40437] [client 104.234.19.100:63119] [client 104.234.19.100] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/style.php"] [unique_id "aR7Zx6hjIyLSv09svwOPtQAAAdM"]
[Thu Nov 20 17:05:12.562868 2025] [:error] [pid 55342:tid 55389] [client 104.234.19.99:64647] [client 104.234.19.99] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/themes/style.php"] [unique_id "aR7ZyLg6x32Tvk7fIG_HiwAAAFE"]
[Thu Nov 20 17:05:13.127645 2025] [:error] [pid 55342:tid 55373] [client 216.24.219.162:62495] [client 216.24.219.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/style.php"] [unique_id "aR7Zybg6x32Tvk7fIG_HjAAAAEE"]
[Thu Nov 20 17:05:13.843335 2025] [:error] [pid 40445:tid 40497] [client 216.24.219.145:51579] [client 216.24.219.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style.php"] [unique_id "aR7ZyVH-MuFcoWRjXpY7EwAAAlY"]
[Thu Nov 20 17:05:14.354683 2025] [:error] [pid 55342:tid 55390] [client 216.24.219.155:31055] [client 216.24.219.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/chosen.php"] [unique_id "aR7Zyrg6x32Tvk7fIG_HkAAAAFI"]
[Thu Nov 20 17:05:14.857563 2025] [:error] [pid 34405:tid 34420] [client 104.234.19.98:33097] [client 104.234.19.98] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/file.php"] [unique_id "aR7ZyjFpvu8oRK7ATfsFIQAAAQ0"]
[Thu Nov 20 17:05:15.355993 2025] [:error] [pid 55340:tid 55361] [client 216.24.219.137:51895] [client 216.24.219.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/flower.php"] [unique_id "aR7Zy_OxD-NeMydTybCKcgAAABA"]
[Thu Nov 20 17:05:15.854057 2025] [:error] [pid 55430:tid 55434] [client 216.24.219.135:57199] [client 216.24.219.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/gifclass.php"] [unique_id "aR7Zy_PZXaIMEU4pE7vtSgAAAME"]
[Thu Nov 20 17:05:16.352441 2025] [:error] [pid 34405:tid 34428] [client 104.234.19.105:37945] [client 104.234.19.105] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/bless.php"] [unique_id "aR7ZzDFpvu8oRK7ATfsFJAAAARU"]
[Thu Nov 20 17:05:16.912906 2025] [:error] [pid 55430:tid 55444] [client 216.24.219.130:47697] [client 216.24.219.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/class-t.api.php"] [unique_id "aR7ZzPPZXaIMEU4pE7vtSwAAAMs"]
[Thu Nov 20 17:05:17.459739 2025] [:error] [pid 40445:tid 40482] [client 216.24.219.159:39269] [client 216.24.219.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/blurbs.php"] [unique_id "aR7ZzVH-MuFcoWRjXpY7FQAAAkc"]
[Thu Nov 20 17:05:19.125356 2025] [:error] [pid 55340:tid 55348] [client 216.24.219.161:59565] [client 216.24.219.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/akcc.php"] [unique_id "aR7Zz_OxD-NeMydTybCKdQAAAAM"]
[Thu Nov 20 17:05:19.628668 2025] [:error] [pid 40636:tid 40661] [client 216.24.219.111:63289] [client 216.24.219.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/abcd.php"] [unique_id "aR7ZzwK8BWUoW3xq0HD7UQAAA5U"]
[Thu Nov 20 17:05:20.134109 2025] [:error] [pid 40508:tid 40528] [client 104.234.19.103:26521] [client 104.234.19.103] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/aku.php"] [unique_id "aR7Z0KxXNVCMW_ksxPuDGgAAApI"]
[Thu Nov 20 17:05:20.651452 2025] [:error] [pid 40415:tid 40442] [client 216.24.219.144:53855] [client 216.24.219.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/cord.php"] [unique_id "aR7Z0KhjIyLSv09svwOPzwAAAdg"]
[Thu Nov 20 17:05:21.171834 2025] [:error] [pid 55430:tid 55443] [client 216.24.219.153:32543] [client 216.24.219.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/dex.php"] [unique_id "aR7Z0fPZXaIMEU4pE7vtUAAAAMo"]
[Thu Nov 20 17:05:21.690980 2025] [:error] [pid 40508:tid 40530] [client 104.234.19.106:37529] [client 104.234.19.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "aR7Z0axXNVCMW_ksxPuDHAAAApQ"]
[Thu Nov 20 17:05:22.229083 2025] [:error] [pid 55342:tid 55387] [client 216.24.219.147:46907] [client 216.24.219.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/zoo.php"] [unique_id "aR7Z0rg6x32Tvk7fIG_HkQAAAE8"]
[Thu Nov 20 19:51:14.743071 2025] [:error] [pid 40445:tid 40479] [client 216.24.219.113:22347] [client 216.24.219.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/style.php"] [unique_id "aR8AslH-MuFcoWRjXpZtjQAAAkQ"]
[Thu Nov 20 19:51:15.235265 2025] [:error] [pid 40445:tid 40489] [client 216.24.219.161:55023] [client 216.24.219.161] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/style.php"] [unique_id "aR8As1H-MuFcoWRjXpZtjwAAAk4"]
[Thu Nov 20 19:51:15.724956 2025] [:error] [pid 40537:tid 40564] [client 216.24.219.137:58593] [client 216.24.219.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/themes/style.php"] [unique_id "aR8As6KlsL5kxTa3c1zusAAAAtc"]
[Thu Nov 20 19:51:16.219503 2025] [:error] [pid 55342:tid 55389] [client 104.234.19.107:44325] [client 104.234.19.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/style.php"] [unique_id "aR8AtLg6x32Tvk7fIG_rlAAAAFE"]
[Thu Nov 20 20:07:39.365692 2025] [:error] [pid 40508:tid 40525] [client 164.92.244.132:42248] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in|out|err)|(in|out)put|fd|memory|temp|filter)" at ARGS_NAMES:\\xadd cgi.force_redirect=0 \\xadd disable_functions="" \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/usr/local/apache/modsecurity-cwaf/rules/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found||wendybinks.com|F|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd cgi.force_redirect=0 \\x5cxadd disable_functions=\\x22\\x22 \\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd cgi.force_redirect=0 \\xadd disable_functions=\\x22\\x22 \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "wendybinks.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aR8Ei6xXNVCMW_ksxPvESgAAAo8"]
[Thu Nov 20 20:07:46.308269 2025] [:error] [pid 55342:tid 55392] [client 164.92.244.132:37336] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about"] [unique_id "aR8Ekrg6x32Tvk7fIG_vMQAAAFQ"]
[Thu Nov 20 20:07:47.464858 2025] [:error] [pid 40508:tid 40521] [client 164.92.244.132:37346] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/debug/default/view"] [unique_id "aR8Ek6xXNVCMW_ksxPvEWAAAAos"]
[Thu Nov 20 20:07:48.776077 2025] [:error] [pid 40445:tid 40485] [client 164.92.244.132:37358] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/v2/_catalog"] [unique_id "aR8ElFH-MuFcoWRjXpZzTAAAAko"]
[Thu Nov 20 20:07:49.952309 2025] [:error] [pid 55430:tid 55436] [client 164.92.244.132:37370] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aR8ElfPZXaIMEU4pE7sPYQAAAMM"]
[Thu Nov 20 20:07:50.994035 2025] [:error] [pid 40415:tid 40430] [client 164.92.244.132:43832] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/server-status"] [unique_id "aR8ElqhjIyLSv09svwO63gAAAcw"]
[Thu Nov 20 20:07:52.319080 2025] [:error] [pid 40445:tid 40482] [client 164.92.244.132:43846] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/login.action"] [unique_id "aR8EmFH-MuFcoWRjXpZzUgAAAkc"]
[Thu Nov 20 20:07:54.115900 2025] [:error] [pid 34405:tid 34431] [client 164.92.244.132:43856] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/_all_dbs"] [unique_id "aR8EmjFpvu8oRK7ATfsq3gAAARg"]
[Thu Nov 20 20:07:55.501687 2025] [:error] [pid 40636:tid 40648] [client 164.92.244.132:43866] [client 164.92.244.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.DS_Store"] [unique_id "aR8EmwK8BWUoW3xq0HAb6gAAA4g"]
[Thu Nov 20 20:07:56.840373 2025] [:error] [pid 34405:tid 34415] [client 164.92.244.132:43870] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.env"] [unique_id "aR8EnDFpvu8oRK7ATfsq4QAAAQg"]
[Thu Nov 20 20:07:58.034478 2025] [:error] [pid 40537:tid 40561] [client 164.92.244.132:43886] [client 164.92.244.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aR8EnqKlsL5kxTa3c1zxbAAAAtQ"]
[Thu Nov 20 21:10:45.119747 2025] [:error] [pid 40415:tid 40432] [client 85.8.130.63:49949] [client 85.8.130.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.63, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR8TVahjIyLSv09svwPJ4gAAAc4"]
[Thu Nov 20 21:10:47.957808 2025] [:error] [pid 40508:tid 40514] [client 85.8.130.80:54367] [client 85.8.130.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.80, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR8TV6xXNVCMW_ksxPvXcwAAAoQ"]
[Thu Nov 20 22:09:33.968261 2025] [:error] [pid 55430:tid 55441] [client 85.8.130.71:55661] [client 85.8.130.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.71, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR8hHfPZXaIMEU4pE7slwAAAAMg"]
[Thu Nov 20 22:09:33.986697 2025] [:error] [pid 40415:tid 40428] [client 85.8.130.56:58223] [client 85.8.130.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.56, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR8hHahjIyLSv09svwPXjQAAAco"]
[Thu Nov 20 23:09:43.666533 2025] [:error] [pid 40537:tid 40547] [client 85.8.130.71:64007] [client 85.8.130.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.71, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR8vN6KlsL5kxTa3c1wNlwAAAsY"]
[Thu Nov 20 23:09:43.712438 2025] [:error] [pid 40445:tid 40477] [client 85.8.130.60:51255] [client 85.8.130.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.60, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR8vN1H-MuFcoWRjXpa1ygAAAkI"]
[Fri Nov 21 00:08:34.127770 2025] [:error] [pid 55340:tid 55354] [client 85.8.130.91:41603] [client 85.8.130.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.91, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR89AvOxD-NeMydTybDbQAAAAAk"]
[Fri Nov 21 00:08:34.128056 2025] [:error] [pid 55340:tid 55358] [client 85.8.130.59:24851] [client 85.8.130.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.59, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR89AvOxD-NeMydTybDbQQAAAA0"]
[Fri Nov 21 01:09:56.852276 2025] [:error] [pid 13536:tid 13743] [client 85.8.130.71:60555] [client 85.8.130.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.71, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR9LZKwnCU8z6PX3-ZmtigAAAJA"]
[Fri Nov 21 01:30:26.723943 2025] [:error] [pid 13536:tid 13729] [client 182.42.110.255:35379] [client 182.42.110.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aR9QMqwnCU8z6PX3-Zm2kwAAAII"]
[Fri Nov 21 01:44:32.756928 2025] [:error] [pid 13805:tid 13819] [client 85.8.130.66:55117] [client 85.8.130.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.66, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR9TgFurU5-GZdwKvr7MHAAAAUs"]
[Fri Nov 21 02:21:38.686462 2025] [:error] [pid 13536:tid 13749] [client 85.8.130.51:54215] [client 85.8.130.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.51, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR9cMqwnCU8z6PX3-ZnJDQAAAJY"]
[Fri Nov 21 02:21:38.686462 2025] [:error] [pid 28937:tid 28960] [client 85.8.130.67:45003] [client 85.8.130.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.67, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR9cMvtbT10GL1y3DOaECAAAANU"]
[Fri Nov 21 03:04:35.126469 2025] [:error] [pid 13536:tid 13747] [client 85.8.130.68:56003] [client 85.8.130.68] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.68, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR9mQ6wnCU8z6PX3-ZnXDwAAAJQ"]
[Fri Nov 21 03:04:35.129679 2025] [:error] [pid 13536:tid 13748] [client 85.8.130.94:59787] [client 85.8.130.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.94, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR9mQ6wnCU8z6PX3-ZnXEAAAAJU"]
[Fri Nov 21 03:39:01.452358 2025] [:error] [pid 33525:tid 33530] [client 85.8.130.45:25331] [client 85.8.130.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.45, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR9uVbcGGgdOWNvk3ANV9AAAAMM"]
[Fri Nov 21 03:39:01.452370 2025] [:error] [pid 33419:tid 33480] [client 85.8.130.83:32421] [client 85.8.130.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.83, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR9uVTFLqOxO7vC9CgwgGwAAAFU"]
[Fri Nov 21 04:20:07.034784 2025] [:error] [pid 13327:tid 13395] [client 85.8.130.53:35753] [client 85.8.130.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.53, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR939_BXf-8B6mFkLeN_MQAAAIo"]
[Fri Nov 21 04:20:07.035310 2025] [:error] [pid 13412:tid 13430] [client 85.8.130.45:41383] [client 85.8.130.45] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.45, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR93933-knz3ZB6HogGcmAAAAM0"]
[Fri Nov 21 04:44:14.314364 2025] [:error] [pid 13326:tid 13364] [client 85.8.130.66:52043] [client 85.8.130.66] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.66, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR99nth942-HkDIkOWrURAAAAEY"]
[Fri Nov 21 05:16:41.148216 2025] [:error] [pid 13326:tid 13360] [client 85.8.130.52:34151] [client 85.8.130.52] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.52, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-FOdh942-HkDIkOWrdJAAAAEI"]
[Fri Nov 21 05:42:14.526997 2025] [:error] [pid 51434:tid 51459] [client 85.8.130.83:32749] [client 85.8.130.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.83, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-LNvU96liplEDkw_Tv7wAAARc"]
[Fri Nov 21 05:50:16.511384 2025] [:error] [pid 13326:tid 13361] [client 20.251.203.255:60628] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aR-NGNh942-HkDIkOWrqXQAAAEM"]
[Fri Nov 21 05:50:18.640202 2025] [:error] [pid 13412:tid 13429] [client 20.251.203.255:60633] [client 20.251.203.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.251.203.255, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aR-NGn3-knz3ZB6HogHBZwAAAMw"]
[Fri Nov 21 05:50:33.437839 2025] [:error] [pid 13412:tid 13434] [client 20.251.203.255:60633] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "wendybinks.com"] [uri "/fm.php"] [unique_id "aR-NKX3-knz3ZB6HogHBfgAAANE"]
[Fri Nov 21 05:50:43.951626 2025] [:error] [pid 13327:tid 13391] [client 20.251.203.255:65353] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/include.php"] [unique_id "aR-NM_BXf-8B6mFkLeOfrwAAAIY"]
[Fri Nov 21 05:50:45.807318 2025] [:error] [pid 13412:tid 13421] [client 20.251.203.255:17389] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/include.php"] [unique_id "aR-NNX3-knz3ZB6HogHBhwAAAMQ"]
[Fri Nov 21 05:50:47.465329 2025] [:error] [pid 13327:tid 13398] [client 20.251.203.255:17344] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/include.php"] [unique_id "aR-NN_BXf-8B6mFkLeOftQAAAI0"]
[Fri Nov 21 05:50:49.348447 2025] [:error] [pid 13412:tid 13418] [client 20.251.203.255:60677] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/include.php"] [unique_id "aR-NOX3-knz3ZB6HogHBjwAAAME"]
[Fri Nov 21 05:50:50.450938 2025] [:error] [pid 13327:tid 13385] [client 20.251.203.255:60687] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/about.php"] [unique_id "aR-NOvBXf-8B6mFkLeOftgAAAIA"]
[Fri Nov 21 05:50:52.079085 2025] [:error] [pid 13326:tid 13379] [client 20.251.203.255:60730] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/about.php"] [unique_id "aR-NPNh942-HkDIkOWrqcAAAAFU"]
[Fri Nov 21 05:50:54.559484 2025] [:error] [pid 13325:tid 13353] [client 20.251.203.255:65360] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/about.php"] [unique_id "aR-NPiBUXj9tD75On3Cm2QAAABc"]
[Fri Nov 21 05:50:56.491211 2025] [:error] [pid 51434:tid 51453] [client 20.251.203.255:17404] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/about.php"] [unique_id "aR-NQPU96liplEDkw_T0-QAAARE"]
[Fri Nov 21 05:50:59.254111 2025] [:error] [pid 13412:tid 13435] [client 20.251.203.255:16993] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/alfa.php"] [unique_id "aR-NQ33-knz3ZB6HogHBlQAAANI"]
[Fri Nov 21 05:51:01.849345 2025] [:error] [pid 13412:tid 13419] [client 20.251.203.255:17344] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/alfa.php"] [unique_id "aR-NRX3-knz3ZB6HogHBmQAAAMI"]
[Fri Nov 21 05:51:03.757414 2025] [:error] [pid 51434:tid 51446] [client 20.251.203.255:17347] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/alfa.php"] [unique_id "aR-NR_U96liplEDkw_T0_wAAAQo"]
[Fri Nov 21 05:51:05.753097 2025] [:error] [pid 13412:tid 13423] [client 20.251.203.255:17349] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/alfa.php"] [unique_id "aR-NSX3-knz3ZB6HogHBngAAAMY"]
[Fri Nov 21 05:51:07.756547 2025] [:error] [pid 51434:tid 51437] [client 20.251.203.255:61974] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aR-NS_U96liplEDkw_T1AAAAAQE"]
[Fri Nov 21 05:51:11.812314 2025] [:error] [pid 13327:tid 13397] [client 20.251.203.255:60706] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aR-NT_BXf-8B6mFkLeOfwwAAAIw"]
[Fri Nov 21 05:51:14.990240 2025] [:error] [pid 13325:tid 13341] [client 20.251.203.255:44780] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aR-NUiBUXj9tD75On3Cm7gAAAAs"]
[Fri Nov 21 05:51:17.963693 2025] [:error] [pid 13327:tid 13407] [client 20.251.203.255:62003] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/rk2.php"] [unique_id "aR-NVfBXf-8B6mFkLeOfxQAAAJY"]
[Fri Nov 21 05:51:20.530395 2025] [:error] [pid 51434:tid 51460] [client 20.251.203.255:61981] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aR-NWPU96liplEDkw_T1FAAAARg"]
[Fri Nov 21 05:51:23.067143 2025] [:error] [pid 13412:tid 13431] [client 20.251.203.255:44769] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aR-NW33-knz3ZB6HogHBswAAAM4"]
[Fri Nov 21 05:51:25.861590 2025] [:error] [pid 13325:tid 13332] [client 20.251.203.255:61999] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aR-NXSBUXj9tD75On3Cm-AAAAAI"]
[Fri Nov 21 05:51:28.316445 2025] [:error] [pid 13326:tid 13368] [client 20.251.203.255:61961] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/images/28c5400b0b.php"] [unique_id "aR-NYNh942-HkDIkOWrqiQAAAEo"]
[Fri Nov 21 05:51:29.964062 2025] [:error] [pid 51434:tid 51441] [client 20.251.203.255:61953] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aR-NYfU96liplEDkw_T1IwAAAQU"]
[Fri Nov 21 05:51:31.997253 2025] [:error] [pid 13327:tid 13392] [client 20.251.203.255:16691] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aR-NY_BXf-8B6mFkLeOfyAAAAIc"]
[Fri Nov 21 05:51:34.399817 2025] [:error] [pid 13327:tid 13386] [client 20.251.203.255:16482] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aR-NZvBXf-8B6mFkLeOfzAAAAIE"]
[Fri Nov 21 05:51:36.645442 2025] [:error] [pid 13325:tid 13346] [client 20.251.203.255:17075] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wordpress/wp-includes/wp-config-sample.php"] [unique_id "aR-NaCBUXj9tD75On3CnAQAAABA"]
[Fri Nov 21 05:51:38.522035 2025] [:error] [pid 13326:tid 13369] [client 20.251.203.255:16675] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aR-Nath942-HkDIkOWrqkgAAAEs"]
[Fri Nov 21 05:51:39.919500 2025] [:error] [pid 13326:tid 13366] [client 20.251.203.255:17049] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "aR-Na9h942-HkDIkOWrqlgAAAEg"]
[Fri Nov 21 05:51:43.931981 2025] [:error] [pid 51434:tid 51445] [client 20.251.203.255:17123] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aR-Nb_U96liplEDkw_T1NgAAAQk"]
[Fri Nov 21 05:51:45.542323 2025] [:error] [pid 13325:tid 13340] [client 20.251.203.255:45771] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aR-NcSBUXj9tD75On3CnAwAAAAo"]
[Fri Nov 21 05:51:47.605790 2025] [:error] [pid 13325:tid 13342] [client 20.251.203.255:17125] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aR-NcyBUXj9tD75On3CnBQAAAAw"]
[Fri Nov 21 05:52:01.598613 2025] [:error] [pid 13326:tid 13367] [client 20.251.203.255:45765] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aR-Ngdh942-HkDIkOWrqvAAAAEk"]
[Fri Nov 21 05:52:05.559866 2025] [:error] [pid 13412:tid 13418] [client 20.251.203.255:52948] [client 20.251.203.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.251.203.255, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/ectoplasm/wp-login.php"] [unique_id "aR-NhX3-knz3ZB6HogHB6gAAAME"]
[Fri Nov 21 05:52:15.471274 2025] [:error] [pid 13412:tid 13420] [client 20.251.203.255:52948] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "aR-Nj33-knz3ZB6HogHB-QAAAMM"]
[Fri Nov 21 05:52:20.330236 2025] [:error] [pid 51434:tid 51460] [client 20.251.203.255:62874] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aR-NlPU96liplEDkw_T1gQAAARg"]
[Fri Nov 21 05:52:21.972616 2025] [:error] [pid 13326:tid 13382] [client 20.251.203.255:46668] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/x.php"] [unique_id "aR-Nldh942-HkDIkOWrqywAAAFg"]
[Fri Nov 21 05:52:23.492537 2025] [:error] [pid 13412:tid 13439] [client 20.251.203.255:60236] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/x.php"] [unique_id "aR-Nl33-knz3ZB6HogHCAgAAANY"]
[Fri Nov 21 05:52:26.248778 2025] [:error] [pid 13327:tid 13392] [client 20.251.203.255:61907] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/x.php"] [unique_id "aR-NmvBXf-8B6mFkLeOgAgAAAIc"]
[Fri Nov 21 05:52:29.861357 2025] [:error] [pid 13412:tid 13429] [client 20.251.203.255:60265] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aR-NnX3-knz3ZB6HogHCCQAAAMw"]
[Fri Nov 21 05:52:31.620694 2025] [:error] [pid 13326:tid 13367] [client 20.251.203.255:47296] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/block-patterns/vuln.php"] [unique_id "aR-Nn9h942-HkDIkOWrq1AAAAEk"]
[Fri Nov 21 05:52:37.024476 2025] [:error] [pid 51434:tid 51458] [client 20.251.203.255:60246] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aR-NpfU96liplEDkw_T1nwAAARY"]
[Fri Nov 21 05:52:44.868515 2025] [:error] [pid 13327:tid 13406] [client 20.251.203.255:62784] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aR-NrPBXf-8B6mFkLeOgDwAAAJU"]
[Fri Nov 21 05:52:48.227564 2025] [:error] [pid 13412:tid 13425] [client 20.251.203.255:60327] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aR-NsH3-knz3ZB6HogHCFAAAAMg"]
[Fri Nov 21 05:52:51.620836 2025] [:error] [pid 13327:tid 13409] [client 20.251.203.255:45825] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aR-Ns_BXf-8B6mFkLeOgFQAAAJg"]
[Fri Nov 21 05:52:54.042726 2025] [:error] [pid 13327:tid 13401] [client 20.251.203.255:62809] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aR-NtvBXf-8B6mFkLeOgGAAAAJA"]
[Fri Nov 21 05:52:56.300957 2025] [:error] [pid 13326:tid 13374] [client 20.251.203.255:45847] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aR-NuNh942-HkDIkOWrq6QAAAFA"]
[Fri Nov 21 05:52:58.054172 2025] [:error] [pid 13412:tid 13433] [client 20.251.203.255:60337] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/images/404.php"] [unique_id "aR-Nun3-knz3ZB6HogHCGgAAANA"]
[Fri Nov 21 05:52:59.575873 2025] [:error] [pid 51434:tid 51451] [client 20.251.203.255:60346] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/images/404.php"] [unique_id "aR-Nu_U96liplEDkw_T1vgAAAQ8"]
[Fri Nov 21 05:53:00.723675 2025] [:error] [pid 13325:tid 13353] [client 20.251.203.255:60344] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/images/404.php"] [unique_id "aR-NvCBUXj9tD75On3CnTAAAABc"]
[Fri Nov 21 05:53:02.641313 2025] [:error] [pid 51434:tid 51444] [client 20.251.203.255:60330] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/images/404.php"] [unique_id "aR-NvvU96liplEDkw_T1wAAAAQg"]
[Fri Nov 21 05:53:03.922245 2025] [:error] [pid 13412:tid 13425] [client 20.251.203.255:16588] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/asus.php"] [unique_id "aR-Nv33-knz3ZB6HogHCIAAAAMg"]
[Fri Nov 21 05:53:05.347790 2025] [:error] [pid 13327:tid 13405] [client 20.251.203.255:45856] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/asus.php"] [unique_id "aR-NwfBXf-8B6mFkLeOgIAAAAJQ"]
[Fri Nov 21 05:53:06.572211 2025] [:error] [pid 13325:tid 13333] [client 20.251.203.255:45885] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/asus.php"] [unique_id "aR-NwiBUXj9tD75On3CnTgAAAAM"]
[Fri Nov 21 05:53:07.716883 2025] [:error] [pid 13326:tid 13369] [client 20.251.203.255:43987] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/asus.php"] [unique_id "aR-Nw9h942-HkDIkOWrq8gAAAEs"]
[Fri Nov 21 05:53:10.222260 2025] [:error] [pid 13412:tid 13424] [client 20.251.203.255:45838] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin.php"] [unique_id "aR-Nxn3-knz3ZB6HogHCKwAAAMc"]
[Fri Nov 21 05:53:12.201773 2025] [:error] [pid 13325:tid 13339] [client 20.251.203.255:47412] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin.php"] [unique_id "aR-NyCBUXj9tD75On3CnWwAAAAk"]
[Fri Nov 21 05:53:13.714293 2025] [:error] [pid 13326:tid 13361] [client 20.251.203.255:16557] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin.php"] [unique_id "aR-Nydh942-HkDIkOWrq9QAAAEM"]
[Fri Nov 21 05:53:15.154306 2025] [:error] [pid 13327:tid 13404] [client 20.251.203.255:43984] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin.php"] [unique_id "aR-Ny_BXf-8B6mFkLeOgLQAAAJM"]
[Fri Nov 21 05:53:16.494284 2025] [:error] [pid 51434:tid 51455] [client 20.251.203.255:65317] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/pki-validation/parx.php"] [unique_id "aR-NzPU96liplEDkw_T1ygAAARM"]
[Fri Nov 21 05:53:22.193101 2025] [:error] [pid 51434:tid 51444] [client 20.251.203.255:16871] [client 20.251.203.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.251.203.255, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aR-N0vU96liplEDkw_T12AAAAQg"]
[Fri Nov 21 05:53:28.708064 2025] [:error] [pid 51434:tid 51447] [client 20.251.203.255:16871] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aR-N2PU96liplEDkw_T14wAAAQs"]
[Fri Nov 21 05:53:37.162980 2025] [:error] [pid 13412:tid 13420] [client 20.251.203.255:17262] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/Diff/Renderer/wp-login.php"] [unique_id "aR-N4X3-knz3ZB6HogHCUAAAAMM"]
[Fri Nov 21 05:53:41.490996 2025] [:error] [pid 13412:tid 13417] [client 20.251.203.255:59958] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aR-N5X3-knz3ZB6HogHCXQAAAMA"]
[Fri Nov 21 05:53:43.464064 2025] [:error] [pid 13325:tid 13332] [client 20.251.203.255:47833] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aR-N5yBUXj9tD75On3CncgAAAAI"]
[Fri Nov 21 05:53:53.815060 2025] [:error] [pid 13326:tid 13368] [client 20.251.203.255:47861] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aR-N8dh942-HkDIkOWrrJAAAAEo"]
[Fri Nov 21 05:53:55.657475 2025] [:error] [pid 13326:tid 13371] [client 20.251.203.255:39841] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aR-N89h942-HkDIkOWrrJwAAAE0"]
[Fri Nov 21 05:53:57.538770 2025] [:error] [pid 51434:tid 51437] [client 20.251.203.255:46749] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aR-N9fU96liplEDkw_T1_QAAAQE"]
[Fri Nov 21 05:53:58.451758 2025] [:error] [pid 13326:tid 13367] [client 20.251.203.255:46767] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aR-N9th942-HkDIkOWrrKwAAAEk"]
[Fri Nov 21 05:53:59.750901 2025] [:error] [pid 13327:tid 13397] [client 20.251.203.255:43498] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about/function.php"] [unique_id "aR-N9_BXf-8B6mFkLeOgVQAAAIw"]
[Fri Nov 21 05:54:04.549649 2025] [:error] [pid 13327:tid 13389] [client 20.251.203.255:17246] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about/function.php"] [unique_id "aR-N_PBXf-8B6mFkLeOgVwAAAIQ"]
[Fri Nov 21 05:54:05.556823 2025] [:error] [pid 13326:tid 13362] [client 20.251.203.255:65293] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about/function.php"] [unique_id "aR-N_dh942-HkDIkOWrrMwAAAEQ"]
[Fri Nov 21 05:54:06.747286 2025] [:error] [pid 51434:tid 51444] [client 20.251.203.255:16572] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about/function.php"] [unique_id "aR-N_vU96liplEDkw_T2BwAAAQg"]
[Fri Nov 21 05:54:08.355691 2025] [:error] [pid 13327:tid 13398] [client 20.251.203.255:17290] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wp.php"] [unique_id "aR-OAPBXf-8B6mFkLeOgWwAAAI0"]
[Fri Nov 21 05:54:10.271632 2025] [:error] [pid 13325:tid 13347] [client 20.251.203.255:61896] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wp.php"] [unique_id "aR-OAiBUXj9tD75On3CnjAAAABE"]
[Fri Nov 21 05:54:12.970000 2025] [:error] [pid 13326:tid 13366] [client 20.251.203.255:59958] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wp.php"] [unique_id "aR-OBNh942-HkDIkOWrrOAAAAEg"]
[Fri Nov 21 05:54:15.401268 2025] [:error] [pid 13327:tid 13396] [client 20.251.203.255:16500] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/wp.php"] [unique_id "aR-OB_BXf-8B6mFkLeOgXwAAAIs"]
[Fri Nov 21 05:54:17.787617 2025] [:error] [pid 13327:tid 13407] [client 20.251.203.255:44750] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aR-OCfBXf-8B6mFkLeOgbgAAAJY"]
[Fri Nov 21 05:54:19.883367 2025] [:error] [pid 13326:tid 13359] [client 20.251.203.255:16674] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aR-OC9h942-HkDIkOWrrRAAAAEE"]
[Fri Nov 21 05:54:22.233704 2025] [:error] [pid 13326:tid 13361] [client 20.251.203.255:16700] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aR-ODth942-HkDIkOWrrSQAAAEM"]
[Fri Nov 21 05:54:24.056454 2025] [:error] [pid 13326:tid 13373] [client 20.251.203.255:16499] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/index.php"] [unique_id "aR-OENh942-HkDIkOWrrSgAAAE8"]
[Fri Nov 21 05:54:26.079714 2025] [:error] [pid 51434:tid 51451] [client 20.251.203.255:44746] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/Cache/content.php"] [unique_id "aR-OEvU96liplEDkw_T2JAAAAQ8"]
[Fri Nov 21 05:54:27.301911 2025] [:error] [pid 51434:tid 51446] [client 20.251.203.255:17045] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "aR-OE_U96liplEDkw_T2JgAAAQo"]
[Fri Nov 21 05:54:29.792980 2025] [:error] [pid 51434:tid 51454] [client 20.251.203.255:44762] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "aR-OFfU96liplEDkw_T2KwAAARI"]
[Fri Nov 21 05:54:31.325171 2025] [:error] [pid 51434:tid 51448] [client 20.251.203.255:16659] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/xmrlpc.php"] [unique_id "aR-OF_U96liplEDkw_T2LwAAAQw"]
[Fri Nov 21 05:54:33.756297 2025] [:error] [pid 51434:tid 51446] [client 20.251.203.255:17069] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/wp-login.php"] [unique_id "aR-OGfU96liplEDkw_T2NAAAAQo"]
[Fri Nov 21 05:54:36.560441 2025] [:error] [pid 13412:tid 13423] [client 20.251.203.255:17042] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "aR-OHH3-knz3ZB6HogHCzwAAAMY"]
[Fri Nov 21 05:54:38.238176 2025] [:error] [pid 13326:tid 13360] [client 20.251.203.255:44737] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "aR-OHth942-HkDIkOWrrUwAAAEI"]
[Fri Nov 21 05:54:40.006568 2025] [:error] [pid 13412:tid 13417] [client 20.251.203.255:44751] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "aR-OIH3-knz3ZB6HogHC0wAAAMA"]
[Fri Nov 21 05:54:41.178073 2025] [:error] [pid 13326:tid 13381] [client 20.251.203.255:16703] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/taptap-null.php"] [unique_id "aR-OIdh942-HkDIkOWrrWAAAAFc"]
[Fri Nov 21 05:54:42.486816 2025] [:error] [pid 13412:tid 13426] [client 20.251.203.255:17025] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/as.php"] [unique_id "aR-OIn3-knz3ZB6HogHC2QAAAMk"]
[Fri Nov 21 05:54:44.255989 2025] [:error] [pid 13325:tid 13331] [client 20.251.203.255:16652] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/as.php"] [unique_id "aR-OJCBUXj9tD75On3CnlgAAAAE"]
[Fri Nov 21 05:54:46.405317 2025] [:error] [pid 51434:tid 51448] [client 20.251.203.255:16404] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/as.php"] [unique_id "aR-OJvU96liplEDkw_T2RAAAAQw"]
[Fri Nov 21 05:54:48.308062 2025] [:error] [pid 51434:tid 51450] [client 20.251.203.255:16394] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/as.php"] [unique_id "aR-OKPU96liplEDkw_T2RwAAAQ4"]
[Fri Nov 21 05:54:51.340480 2025] [:error] [pid 13325:tid 13348] [client 20.251.203.255:44788] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/wp-login.php"] [unique_id "aR-OKyBUXj9tD75On3CnnAAAABI"]
[Fri Nov 21 05:55:03.985638 2025] [:error] [pid 51434:tid 51445] [client 20.251.203.255:17106] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/providers/about.php"] [unique_id "aR-ON_U96liplEDkw_T2ZAAAAQk"]
[Fri Nov 21 05:55:11.318600 2025] [:error] [pid 13412:tid 13419] [client 20.251.203.255:44766] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sodium_compat/src/content.php"] [unique_id "aR-OP33-knz3ZB6HogHDBAAAAMI"]
[Fri Nov 21 05:55:14.618222 2025] [:error] [pid 13326:tid 13371] [client 20.251.203.255:16488] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/rest-api/admin.php"] [unique_id "aR-OQth942-HkDIkOWrreAAAAE0"]
[Fri Nov 21 05:55:16.557562 2025] [:error] [pid 13412:tid 13434] [client 20.251.203.255:17074] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aR-ORH3-knz3ZB6HogHDCAAAANE"]
[Fri Nov 21 05:55:23.213854 2025] [:error] [pid 13412:tid 13427] [client 20.251.203.255:16673] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/about.php"] [unique_id "aR-OS33-knz3ZB6HogHDEgAAAMo"]
[Fri Nov 21 05:55:35.464169 2025] [:error] [pid 13326:tid 13358] [client 20.251.203.255:65402] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/wp.php"] [unique_id "aR-OV9h942-HkDIkOWrriQAAAEA"]
[Fri Nov 21 05:55:40.623921 2025] [:error] [pid 13326:tid 13377] [client 20.251.203.255:16764] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aR-OXNh942-HkDIkOWrrkQAAAFM"]
[Fri Nov 21 05:55:44.276072 2025] [:error] [pid 13326:tid 13364] [client 20.251.203.255:16998] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/chosen.php"] [unique_id "aR-OYNh942-HkDIkOWrrkgAAAEY"]
[Fri Nov 21 05:55:46.483841 2025] [:error] [pid 13412:tid 13435] [client 20.251.203.255:17375] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/chosen.php"] [unique_id "aR-OYn3-knz3ZB6HogHDJQAAANI"]
[Fri Nov 21 05:55:48.723427 2025] [:error] [pid 13326:tid 13360] [client 20.251.203.255:17373] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/chosen.php"] [unique_id "aR-OZNh942-HkDIkOWrrlQAAAEI"]
[Fri Nov 21 05:55:50.922329 2025] [:error] [pid 13327:tid 13405] [client 20.251.203.255:16976] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/chosen.php"] [unique_id "aR-OZvBXf-8B6mFkLeOg5gAAAJQ"]
[Fri Nov 21 05:55:53.013837 2025] [:error] [pid 51434:tid 51458] [client 20.251.203.255:60608] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/chosen.php"] [unique_id "aR-OafU96liplEDkw_T2xwAAARY"]
[Fri Nov 21 05:55:55.005971 2025] [:error] [pid 51434:tid 51439] [client 20.251.203.255:47909] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aR-Oa_U96liplEDkw_T2ywAAAQM"]
[Fri Nov 21 05:55:57.941628 2025] [:error] [pid 51434:tid 51458] [client 20.251.203.255:61962] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aR-ObfU96liplEDkw_T20gAAARY"]
[Fri Nov 21 05:55:59.025071 2025] [:error] [pid 51434:tid 51444] [client 20.251.203.255:46388] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aR-Ob_U96liplEDkw_T21AAAAQg"]
[Fri Nov 21 05:56:00.964914 2025] [:error] [pid 13327:tid 13409] [client 20.251.203.255:61992] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/parx.php"] [unique_id "aR-OcPBXf-8B6mFkLeOg-QAAAJg"]
[Fri Nov 21 05:56:03.940803 2025] [:error] [pid 13412:tid 13435] [client 20.251.203.255:62003] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php"] [unique_id "aR-Oc33-knz3ZB6HogHDPQAAANI"]
[Fri Nov 21 05:56:09.621652 2025] [:error] [pid 13327:tid 13398] [client 20.251.203.255:16931] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/index/function.php"] [unique_id "aR-OefBXf-8B6mFkLeOhDQAAAI0"]
[Fri Nov 21 05:56:10.478005 2025] [:error] [pid 13326:tid 13362] [client 20.251.203.255:16897] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/index/function.php"] [unique_id "aR-Oeth942-HkDIkOWrrpwAAAEQ"]
[Fri Nov 21 05:56:11.142053 2025] [:error] [pid 51434:tid 51437] [client 20.251.203.255:46346] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/index/function.php"] [unique_id "aR-Oe_U96liplEDkw_T26gAAAQE"]
[Fri Nov 21 05:56:11.916331 2025] [:error] [pid 13412:tid 13439] [client 20.251.203.255:46381] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/index/function.php"] [unique_id "aR-Oe33-knz3ZB6HogHDSAAAANY"]
[Fri Nov 21 05:56:13.632402 2025] [:error] [pid 13327:tid 13403] [client 20.251.203.255:16949] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css.php"] [unique_id "aR-OffBXf-8B6mFkLeOhGwAAAJI"]
[Fri Nov 21 05:56:15.682129 2025] [:error] [pid 13412:tid 13425] [client 20.251.203.255:60618] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css.php"] [unique_id "aR-Of33-knz3ZB6HogHDTwAAAMg"]
[Fri Nov 21 05:56:17.445451 2025] [:error] [pid 51434:tid 51439] [client 20.251.203.255:60614] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css.php"] [unique_id "aR-OgfU96liplEDkw_T29AAAAQM"]
[Fri Nov 21 05:56:21.919430 2025] [:error] [pid 13412:tid 13426] [client 20.251.203.255:16919] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css.php"] [unique_id "aR-OhX3-knz3ZB6HogHDVQAAAMk"]
[Fri Nov 21 05:56:25.240062 2025] [:error] [pid 51434:tid 51439] [client 20.251.203.255:60611] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/index.php"] [unique_id "aR-OifU96liplEDkw_T2_wAAAQM"]
[Fri Nov 21 05:56:27.685761 2025] [:error] [pid 13325:tid 13350] [client 20.251.203.255:61960] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/index.php"] [unique_id "aR-OiyBUXj9tD75On3Cn-QAAABQ"]
[Fri Nov 21 05:56:33.354623 2025] [:error] [pid 13327:tid 13405] [client 20.251.203.255:52979] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/index.php"] [unique_id "aR-OkfBXf-8B6mFkLeOhPwAAAJQ"]
[Fri Nov 21 05:56:44.292098 2025] [:error] [pid 13412:tid 13421] [client 20.251.203.255:60037] [client 20.251.203.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.251.203.255, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "aR-OnH3-knz3ZB6HogHDeAAAAMQ"]
[Fri Nov 21 05:56:50.192422 2025] [:error] [pid 13412:tid 13433] [client 20.251.203.255:60037] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "aR-Oon3-knz3ZB6HogHDgAAAANA"]
[Fri Nov 21 05:56:54.734521 2025] [:error] [pid 13412:tid 13430] [client 20.251.203.255:60085] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aR-Opn3-knz3ZB6HogHDmwAAAM0"]
[Fri Nov 21 05:56:56.800642 2025] [:error] [pid 13327:tid 13396] [client 20.251.203.255:60050] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "aR-OqPBXf-8B6mFkLeOhZQAAAIs"]
[Fri Nov 21 05:57:00.426016 2025] [autoindex:error] [pid 13325:tid 13331] [client 20.251.203.255:46713] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 05:57:02.549928 2025] [:error] [pid 13325:tid 13345] [client 20.251.203.255:46713] [client 20.251.203.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.251.203.255, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/revslider/public/assets/assets/sources/wp-login.php"] [unique_id "aR-OriBUXj9tD75On3CoKgAAAA8"]
[Fri Nov 21 05:57:15.663350 2025] [:error] [pid 13325:tid 13344] [client 20.251.203.255:46713] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/images/wp-login.php"] [unique_id "aR-OuyBUXj9tD75On3CoPwAAAA4"]
[Fri Nov 21 05:57:17.388520 2025] [:error] [pid 13325:tid 13343] [client 20.251.203.255:47306] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/images/wp-login.php"] [unique_id "aR-OvSBUXj9tD75On3CoQgAAAA0"]
[Fri Nov 21 05:57:19.556902 2025] [:error] [pid 13327:tid 13393] [client 20.251.203.255:60308] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/images/wp-login.php"] [unique_id "aR-Ov_BXf-8B6mFkLeOhgAAAAIg"]
[Fri Nov 21 05:57:21.870733 2025] [:error] [pid 13412:tid 13421] [client 20.251.203.255:17291] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/images/wp-login.php"] [unique_id "aR-OwX3-knz3ZB6HogHDuAAAAMQ"]
[Fri Nov 21 05:57:24.408007 2025] [:error] [pid 51434:tid 51446] [client 20.251.203.255:61906] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/xp.php"] [unique_id "aR-OxPU96liplEDkw_T3XQAAAQo"]
[Fri Nov 21 05:57:25.568367 2025] [:error] [pid 13412:tid 13433] [client 20.251.203.255:16633] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/xp.php"] [unique_id "aR-OxX3-knz3ZB6HogHDvAAAANA"]
[Fri Nov 21 05:57:28.076834 2025] [:error] [pid 51434:tid 51444] [client 20.251.203.255:60304] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/xp.php"] [unique_id "aR-OyPU96liplEDkw_T3ZwAAAQg"]
[Fri Nov 21 05:57:30.279479 2025] [:error] [pid 13326:tid 13377] [client 20.251.203.255:61330] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/xp.php"] [unique_id "aR-Oyth942-HkDIkOWrr-wAAAFM"]
[Fri Nov 21 05:57:32.623412 2025] [:error] [pid 13327:tid 13404] [client 20.251.203.255:17318] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/assets/themes.php"] [unique_id "aR-OzPBXf-8B6mFkLeOhkQAAAJM"]
[Fri Nov 21 05:57:34.409667 2025] [:error] [pid 51434:tid 51456] [client 20.251.203.255:61908] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aR-OzvU96liplEDkw_T3fAAAARQ"]
[Fri Nov 21 05:57:37.004108 2025] [:error] [pid 13412:tid 13428] [client 20.251.203.255:45860] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aR-O0X3-knz3ZB6HogHD0QAAAMs"]
[Fri Nov 21 05:57:38.350761 2025] [:error] [pid 51434:tid 51460] [client 20.251.203.255:45866] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aR-O0vU96liplEDkw_T3hQAAARg"]
[Fri Nov 21 05:57:41.497843 2025] [:error] [pid 13327:tid 13398] [client 20.251.203.255:17287] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aR-O1fBXf-8B6mFkLeOhnAAAAI0"]
[Fri Nov 21 05:57:43.725661 2025] [:error] [pid 13412:tid 13431] [client 20.251.203.255:17280] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aR-O133-knz3ZB6HogHD3QAAAM4"]
[Fri Nov 21 05:57:46.991396 2025] [:error] [pid 13327:tid 13403] [client 20.251.203.255:60330] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aR-O2vBXf-8B6mFkLeOhsAAAAJI"]
[Fri Nov 21 05:57:49.268753 2025] [:error] [pid 13325:tid 13333] [client 20.251.203.255:17343] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aR-O3SBUXj9tD75On3CoqAAAAAM"]
[Fri Nov 21 05:57:50.886169 2025] [:error] [pid 13327:tid 13404] [client 20.251.203.255:45830] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/chosen.php"] [unique_id "aR-O3vBXf-8B6mFkLeOhtgAAAJM"]
[Fri Nov 21 05:57:53.394126 2025] [:error] [pid 13325:tid 13333] [client 20.251.203.255:60351] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aR-O4SBUXj9tD75On3CouQAAAAM"]
[Fri Nov 21 05:57:55.875478 2025] [:error] [pid 13327:tid 13389] [client 20.251.203.255:45839] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "aR-O4_BXf-8B6mFkLeOhvQAAAIQ"]
[Fri Nov 21 05:57:58.855254 2025] [:error] [pid 13326:tid 13362] [client 20.251.203.255:45863] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/js/style.php"] [unique_id "aR-O5th942-HkDIkOWrsMwAAAEQ"]
[Fri Nov 21 05:58:01.063045 2025] [:error] [pid 13327:tid 13400] [client 20.251.203.255:60294] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/js/style.php"] [unique_id "aR-O6fBXf-8B6mFkLeOhxAAAAI8"]
[Fri Nov 21 05:58:04.723676 2025] [:error] [pid 13327:tid 13407] [client 20.251.203.255:45828] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/js/style.php"] [unique_id "aR-O7PBXf-8B6mFkLeOhzgAAAJY"]
[Fri Nov 21 05:58:07.345823 2025] [:error] [pid 13325:tid 13331] [client 20.251.203.255:39848] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/js/style.php"] [unique_id "aR-O7yBUXj9tD75On3Co1wAAAAE"]
[Fri Nov 21 05:58:09.183745 2025] [:error] [pid 13412:tid 13422] [client 20.251.203.255:47832] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aR-O8X3-knz3ZB6HogHESwAAAMU"]
[Fri Nov 21 05:58:15.420777 2025] [:error] [pid 13325:tid 13350] [client 20.251.203.255:47840] [client 20.251.203.255] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.251.203.255, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aR-O9yBUXj9tD75On3Co4QAAABQ"]
[Fri Nov 21 05:58:21.388663 2025] [:error] [pid 13325:tid 13333] [client 20.251.203.255:47840] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "aR-O_SBUXj9tD75On3Co6QAAAAM"]
[Fri Nov 21 05:59:11.586975 2025] [:error] [pid 13412:tid 13434] [client 20.251.203.255:43925] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aR-PL33-knz3ZB6HogHEfwAAANE"]
[Fri Nov 21 06:00:21.495859 2025] [:error] [pid 13327:tid 13389] [client 20.251.203.255:17062] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/index/x.php"] [unique_id "aR-PdfBXf-8B6mFkLeOifAAAAIQ"]
[Fri Nov 21 06:00:23.894643 2025] [:error] [pid 51434:tid 51437] [client 20.251.203.255:46176] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/index/x.php"] [unique_id "aR-Pd_U96liplEDkw_T4WQAAAQE"]
[Fri Nov 21 06:00:26.893922 2025] [:error] [pid 13325:tid 13352] [client 20.251.203.255:16398] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/index/x.php"] [unique_id "aR-PeiBUXj9tD75On3CpWgAAABY"]
[Fri Nov 21 06:00:30.136672 2025] [:error] [pid 13325:tid 13332] [client 20.251.203.255:46316] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/index/x.php"] [unique_id "aR-PfiBUXj9tD75On3CpZgAAAAI"]
[Fri Nov 21 06:00:31.847461 2025] [:error] [pid 13325:tid 13339] [client 20.251.203.255:16766] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/network.php"] [unique_id "aR-PfyBUXj9tD75On3CpagAAAAk"]
[Fri Nov 21 06:00:34.826930 2025] [:error] [pid 13327:tid 13404] [client 20.251.203.255:16427] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aR-PgvBXf-8B6mFkLeOigwAAAJM"]
[Fri Nov 21 06:00:36.454799 2025] [:error] [pid 51434:tid 51459] [client 20.251.203.255:46330] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aR-PhPU96liplEDkw_T4ZAAAARc"]
[Fri Nov 21 06:00:37.282944 2025] [:error] [pid 13412:tid 13428] [client 20.251.203.255:16762] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aR-PhX3-knz3ZB6HogHEyQAAAMs"]
[Fri Nov 21 06:00:39.533036 2025] [:error] [pid 13325:tid 13353] [client 20.251.203.255:46157] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/.well-known/cc.php"] [unique_id "aR-PhyBUXj9tD75On3CpdgAAABc"]
[Fri Nov 21 06:00:41.097031 2025] [:error] [pid 13412:tid 13420] [client 20.251.203.255:16403] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/pomo/chosen.php"] [unique_id "aR-PiX3-knz3ZB6HogHE0AAAAMM"]
[Fri Nov 21 06:00:42.584267 2025] [:error] [pid 13325:tid 13335] [client 20.251.203.255:46276] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aR-PiiBUXj9tD75On3CpfgAAAAU"]
[Fri Nov 21 06:00:45.043676 2025] [:error] [pid 13325:tid 13343] [client 20.251.203.255:46326] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aR-PjSBUXj9tD75On3CphwAAAA0"]
[Fri Nov 21 06:00:47.174604 2025] [:error] [pid 13325:tid 13338] [client 20.251.203.255:46308] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/pki-validation/pwnd.php"] [unique_id "aR-PjyBUXj9tD75On3CpjQAAAAg"]
[Fri Nov 21 06:00:48.848851 2025] [:error] [pid 13412:tid 13436] [client 20.251.203.255:46332] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/cong.php"] [unique_id "aR-PkH3-knz3ZB6HogHE1gAAANM"]
[Fri Nov 21 06:00:51.581823 2025] [:error] [pid 13327:tid 13397] [client 20.251.203.255:46171] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/cong.php"] [unique_id "aR-Pk_BXf-8B6mFkLeOilAAAAIw"]
[Fri Nov 21 06:00:52.682012 2025] [:error] [pid 51434:tid 51438] [client 20.251.203.255:16723] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/cong.php"] [unique_id "aR-PlPU96liplEDkw_T4cgAAAQI"]
[Fri Nov 21 06:00:54.099042 2025] [:error] [pid 13327:tid 13406] [client 20.251.203.255:46151] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/cong.php"] [unique_id "aR-PlvBXf-8B6mFkLeOimgAAAJU"]
[Fri Nov 21 06:00:56.828148 2025] [:error] [pid 13412:tid 13432] [client 20.251.203.255:60638] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/shell.php"] [unique_id "aR-PmH3-knz3ZB6HogHE4gAAAM8"]
[Fri Nov 21 06:01:00.569025 2025] [:error] [pid 13412:tid 13422] [client 20.251.203.255:16730] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/mah.php"] [unique_id "aR-PnH3-knz3ZB6HogHE5gAAAMU"]
[Fri Nov 21 06:01:03.528353 2025] [:error] [pid 13327:tid 13395] [client 20.251.203.255:47883] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/mah.php"] [unique_id "aR-Pn_BXf-8B6mFkLeOiqAAAAIo"]
[Fri Nov 21 06:01:05.395067 2025] [:error] [pid 13326:tid 13363] [client 20.251.203.255:46333] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/mah.php"] [unique_id "aR-Podh942-HkDIkOWrtDgAAAEU"]
[Fri Nov 21 06:01:09.626751 2025] [:error] [pid 51434:tid 51442] [client 20.251.203.255:47892] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/mah.php"] [unique_id "aR-PpfU96liplEDkw_T4mgAAAQY"]
[Fri Nov 21 06:01:18.046086 2025] [:error] [pid 13325:tid 13346] [client 20.251.203.255:47928] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade/admin.php"] [unique_id "aR-PriBUXj9tD75On3Cp4QAAABA"]
[Fri Nov 21 06:01:24.872807 2025] [:error] [pid 13326:tid 13365] [client 20.251.203.255:16974] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/block-supports/variations.php"] [unique_id "aR-PtNh942-HkDIkOWrtJwAAAEc"]
[Fri Nov 21 06:01:26.297937 2025] [:error] [pid 13412:tid 13431] [client 20.251.203.255:52951] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/rest-api/wp-login.php"] [unique_id "aR-Ptn3-knz3ZB6HogHFIgAAAM4"]
[Fri Nov 21 06:01:36.917086 2025] [:error] [pid 13327:tid 13406] [client 20.251.203.255:47354] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aR-PwPBXf-8B6mFkLeOizAAAAJU"]
[Fri Nov 21 06:01:41.093809 2025] [:error] [pid 13412:tid 13441] [client 20.251.203.255:17354] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/autoload_classmap.php"] [unique_id "aR-PxX3-knz3ZB6HogHFLAAAANg"]
[Fri Nov 21 06:01:42.913783 2025] [:error] [pid 13325:tid 13347] [client 20.251.203.255:60284] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/item.php"] [unique_id "aR-PxiBUXj9tD75On3CqCAAAABE"]
[Fri Nov 21 06:01:51.432160 2025] [:error] [pid 13326:tid 13364] [client 20.251.203.255:63328] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sodium_compat/link.php"] [unique_id "aR-Pz9h942-HkDIkOWrtSAAAAEY"]
[Fri Nov 21 06:01:55.334287 2025] [:error] [pid 13412:tid 13429] [client 20.251.203.255:61312] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/wlw/wp-login.php"] [unique_id "aR-P033-knz3ZB6HogHFOwAAAMw"]
[Fri Nov 21 06:02:11.758018 2025] [:error] [pid 13326:tid 13380] [client 20.251.203.255:63303] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/content.php"] [unique_id "aR-P49h942-HkDIkOWrtYQAAAFY"]
[Fri Nov 21 06:02:15.567947 2025] [:error] [pid 13412:tid 13437] [client 20.251.203.255:61931] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/mah.php"] [unique_id "aR-P533-knz3ZB6HogHFXwAAANQ"]
[Fri Nov 21 06:02:22.031499 2025] [:error] [pid 13325:tid 13352] [client 20.251.203.255:44675] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/mah.php"] [unique_id "aR-P7iBUXj9tD75On3CqYwAAABY"]
[Fri Nov 21 06:02:29.368018 2025] [:error] [pid 13327:tid 13397] [client 20.251.203.255:44673] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/mah.php"] [unique_id "aR-P9fBXf-8B6mFkLeOi-QAAAIw"]
[Fri Nov 21 06:02:42.381958 2025] [:error] [pid 13325:tid 13341] [client 20.251.203.255:45869] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aR-QAiBUXj9tD75On3CqkAAAAAs"]
[Fri Nov 21 06:03:00.280861 2025] [:error] [pid 13325:tid 13353] [client 20.251.203.255:44698] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aR-QFCBUXj9tD75On3CqxgAAABc"]
[Fri Nov 21 06:03:25.201614 2025] [:error] [pid 13325:tid 13330] [client 20.251.203.255:16855] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aR-QLSBUXj9tD75On3Cq5gAAAAA"]
[Fri Nov 21 06:03:35.802352 2025] [:error] [pid 13325:tid 13333] [client 20.251.203.255:47852] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/wp-login.php"] [unique_id "aR-QNyBUXj9tD75On3Cq8QAAAAM"]
[Fri Nov 21 06:03:53.494140 2025] [:error] [pid 13327:tid 13395] [client 20.251.203.255:59910] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/alfa-rex.php"] [unique_id "aR-QSfBXf-8B6mFkLeOjiAAAAIo"]
[Fri Nov 21 06:03:58.759496 2025] [:error] [pid 13412:tid 13440] [client 20.251.203.255:41193] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aR-QTn3-knz3ZB6HogHF7QAAANc"]
[Fri Nov 21 06:04:19.117512 2025] [:error] [pid 13327:tid 13405] [client 20.251.203.255:16664] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aR-QY_BXf-8B6mFkLeOjoQAAAJQ"]
[Fri Nov 21 06:04:20.963210 2025] [:error] [pid 13412:tid 13418] [client 20.251.203.255:16688] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aR-QZH3-knz3ZB6HogHGCAAAAME"]
[Fri Nov 21 06:04:27.668742 2025] [:error] [pid 13327:tid 13402] [client 20.251.203.255:44746] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/blocks/edit.php"] [unique_id "aR-Qa_BXf-8B6mFkLeOjsgAAAJE"]
[Fri Nov 21 06:04:30.477695 2025] [:error] [pid 13325:tid 13339] [client 20.251.203.255:17169] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/lock.php"] [unique_id "aR-QbiBUXj9tD75On3CrQQAAAAk"]
[Fri Nov 21 06:04:40.006686 2025] [:error] [pid 13327:tid 13387] [client 20.251.203.255:44796] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/up.php"] [unique_id "aR-QePBXf-8B6mFkLeOjxwAAAII"]
[Fri Nov 21 06:04:41.591458 2025] [:error] [pid 13325:tid 13339] [client 20.251.203.255:16470] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aR-QeSBUXj9tD75On3CrRwAAAAk"]
[Fri Nov 21 06:04:44.072024 2025] [:error] [pid 13325:tid 13332] [client 20.251.203.255:17040] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/atomlib.php"] [unique_id "aR-QfCBUXj9tD75On3CrTwAAAAI"]
[Fri Nov 21 06:04:46.593808 2025] [:error] [pid 13412:tid 13441] [client 20.251.203.255:44764] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/atomlib.php"] [unique_id "aR-Qfn3-knz3ZB6HogHGKQAAANg"]
[Fri Nov 21 06:04:50.891889 2025] [:error] [pid 13326:tid 13367] [client 20.251.203.255:17032] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/atomlib.php"] [unique_id "aR-Qgth942-HkDIkOWruOwAAAEk"]
[Fri Nov 21 06:04:54.073917 2025] [:error] [pid 13327:tid 13404] [client 20.251.203.255:17031] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/atomlib.php"] [unique_id "aR-QhvBXf-8B6mFkLeOj0AAAAJM"]
[Fri Nov 21 06:04:56.620357 2025] [:error] [pid 51434:tid 51453] [client 20.251.203.255:17085] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/item.php"] [unique_id "aR-QiPU96liplEDkw_T5vQAAARE"]
[Fri Nov 21 06:04:59.034459 2025] [:error] [pid 51434:tid 51458] [client 20.251.203.255:65406] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/item.php"] [unique_id "aR-Qi_U96liplEDkw_T5wQAAARY"]
[Fri Nov 21 06:05:02.543849 2025] [:error] [pid 13327:tid 13400] [client 20.251.203.255:17036] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/item.php"] [unique_id "aR-QjvBXf-8B6mFkLeOj2wAAAI8"]
[Fri Nov 21 06:05:04.710470 2025] [:error] [pid 13327:tid 13409] [client 20.251.203.255:16468] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/item.php"] [unique_id "aR-QkPBXf-8B6mFkLeOj3QAAAJg"]
[Fri Nov 21 06:05:07.224111 2025] [:error] [pid 13326:tid 13365] [client 20.251.203.255:65345] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR-Qk9h942-HkDIkOWruUwAAAEc"]
[Fri Nov 21 06:05:09.711266 2025] [:error] [pid 51434:tid 51448] [client 20.251.203.255:65403] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR-QlfU96liplEDkw_T5ygAAAQw"]
[Fri Nov 21 06:05:10.939207 2025] [:error] [pid 13325:tid 13336] [client 20.251.203.255:46147] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR-QliBUXj9tD75On3CrZgAAAAY"]
[Fri Nov 21 06:05:12.493467 2025] [:error] [pid 51434:tid 51436] [client 20.251.203.255:16432] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade/about.php"] [unique_id "aR-QmPU96liplEDkw_T5zAAAAQA"]
[Fri Nov 21 06:05:14.385286 2025] [:error] [pid 13325:tid 13344] [client 20.251.203.255:17082] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/alfa-rex.php"] [unique_id "aR-QmiBUXj9tD75On3CrbwAAAA4"]
[Fri Nov 21 06:05:17.360100 2025] [:error] [pid 13326:tid 13359] [client 20.251.203.255:65385] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/cloud.php"] [unique_id "aR-Qndh942-HkDIkOWruXwAAAEE"]
[Fri Nov 21 06:05:19.363314 2025] [:error] [pid 13325:tid 13352] [client 20.251.203.255:46164] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/cloud.php"] [unique_id "aR-QnyBUXj9tD75On3CrdgAAABY"]
[Fri Nov 21 06:05:22.195866 2025] [:error] [pid 51434:tid 51460] [client 20.251.203.255:16409] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/cloud.php"] [unique_id "aR-QovU96liplEDkw_T50QAAARg"]
[Fri Nov 21 06:05:25.011634 2025] [:error] [pid 13412:tid 13425] [client 20.251.203.255:47924] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css/cloud.php"] [unique_id "aR-QpX3-knz3ZB6HogHGSwAAAMg"]
[Fri Nov 21 06:05:28.997428 2025] [:error] [pid 13327:tid 13393] [client 20.251.203.255:46156] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/index.php"] [unique_id "aR-QqPBXf-8B6mFkLeOj8gAAAIg"]
[Fri Nov 21 06:05:36.845415 2025] [:error] [pid 13325:tid 13332] [client 20.251.203.255:60615] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/index.php"] [unique_id "aR-QsCBUXj9tD75On3CriQAAAAI"]
[Fri Nov 21 06:05:54.151849 2025] [:error] [pid 13326:tid 13382] [client 20.251.203.255:61979] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/assets/file.php"] [unique_id "aR-Qwth942-HkDIkOWrueAAAAFg"]
[Fri Nov 21 06:06:15.025869 2025] [:error] [pid 13327:tid 13398] [client 20.251.203.255:60658] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/alfa-rex.php"] [unique_id "aR-Q1_BXf-8B6mFkLeOkJgAAAI0"]
[Fri Nov 21 06:06:16.373435 2025] [:error] [pid 51434:tid 51451] [client 20.251.203.255:46288] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/alfa-rex.php"] [unique_id "aR-Q2PU96liplEDkw_T6QgAAAQ8"]
[Fri Nov 21 06:06:17.899264 2025] [:error] [pid 13326:tid 13374] [client 20.251.203.255:46304] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/alfa-rex.php"] [unique_id "aR-Q2dh942-HkDIkOWrunwAAAFA"]
[Fri Nov 21 06:06:24.855871 2025] [:error] [pid 51434:tid 51437] [client 20.251.203.255:46308] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/alfa-rex.php"] [unique_id "aR-Q4PU96liplEDkw_T6SQAAAQE"]
[Fri Nov 21 06:06:33.800337 2025] [:error] [pid 13325:tid 13354] [client 20.251.203.255:60619] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aR-Q6SBUXj9tD75On3CsGAAAABg"]
[Fri Nov 21 06:06:35.492659 2025] [:error] [pid 13325:tid 13332] [client 20.251.203.255:60652] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aR-Q6yBUXj9tD75On3CsIQAAAAI"]
[Fri Nov 21 06:06:39.400825 2025] [:error] [pid 13325:tid 13353] [client 20.251.203.255:61992] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aR-Q7yBUXj9tD75On3CsJQAAABc"]
[Fri Nov 21 06:06:41.949898 2025] [:error] [pid 13412:tid 13435] [client 20.251.203.255:62001] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/wp-login.php"] [unique_id "aR-Q8X3-knz3ZB6HogHGzQAAANI"]
[Fri Nov 21 06:06:43.306098 2025] [:error] [pid 13412:tid 13433] [client 20.251.203.255:61953] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aR-Q833-knz3ZB6HogHG0AAAANA"]
[Fri Nov 21 06:06:45.081761 2025] [:error] [pid 13327:tid 13407] [client 20.251.203.255:60650] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aR-Q9fBXf-8B6mFkLeOkXQAAAJY"]
[Fri Nov 21 06:06:47.289918 2025] [:error] [pid 13325:tid 13339] [client 20.251.203.255:46309] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aR-Q9yBUXj9tD75On3CsLgAAAAk"]
[Fri Nov 21 06:06:50.140331 2025] [:error] [pid 13412:tid 13418] [client 20.251.203.255:61956] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aR-Q-n3-knz3ZB6HogHG2AAAAME"]
[Fri Nov 21 06:06:52.668344 2025] [:error] [pid 13326:tid 13359] [client 20.251.203.255:60626] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/Decode/wp-login.php"] [unique_id "aR-Q_Nh942-HkDIkOWruuwAAAEE"]
[Fri Nov 21 06:06:54.486045 2025] [:error] [pid 51434:tid 51451] [client 20.251.203.255:61955] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uploads/test.php"] [unique_id "aR-Q_vU96liplEDkw_T6dgAAAQ8"]
[Fri Nov 21 06:06:56.867963 2025] [:error] [pid 13326:tid 13376] [client 20.251.203.255:61991] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uploads/test.php"] [unique_id "aR-RANh942-HkDIkOWruwgAAAFI"]
[Fri Nov 21 06:06:59.169880 2025] [:error] [pid 13412:tid 13426] [client 20.251.203.255:60665] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uploads/test.php"] [unique_id "aR-RA33-knz3ZB6HogHHEAAAAMk"]
[Fri Nov 21 06:07:00.759703 2025] [:error] [pid 13327:tid 13395] [client 20.251.203.255:47883] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uploads/test.php"] [unique_id "aR-RBPBXf-8B6mFkLeOkcgAAAIo"]
[Fri Nov 21 06:07:02.610147 2025] [:error] [pid 13325:tid 13353] [client 20.251.203.255:47907] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/upgrade.php"] [unique_id "aR-RBiBUXj9tD75On3CsWQAAABc"]
[Fri Nov 21 06:07:05.953322 2025] [:error] [pid 13325:tid 13354] [client 20.251.203.255:60657] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/upgrade.php"] [unique_id "aR-RCSBUXj9tD75On3CsXwAAABg"]
[Fri Nov 21 06:07:11.178925 2025] [:error] [pid 13325:tid 13340] [client 20.251.203.255:60647] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/upgrade.php"] [unique_id "aR-RDyBUXj9tD75On3CscgAAAAo"]
[Fri Nov 21 06:07:21.247643 2025] [:error] [pid 13326:tid 13376] [client 20.251.203.255:46296] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/Cookie/wp-login.php"] [unique_id "aR-RGdh942-HkDIkOWru2QAAAFI"]
[Fri Nov 21 06:07:28.490437 2025] [:error] [pid 13325:tid 13332] [client 20.251.203.255:47891] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aR-RICBUXj9tD75On3CslQAAAAI"]
[Fri Nov 21 06:07:47.532018 2025] [:error] [pid 13325:tid 13343] [client 20.251.203.255:60640] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aR-RMyBUXj9tD75On3CssAAAAA0"]
[Fri Nov 21 06:07:49.167074 2025] [:error] [pid 51434:tid 51445] [client 20.251.203.255:61983] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/about.php"] [unique_id "aR-RNfU96liplEDkw_T6rAAAAQk"]
[Fri Nov 21 06:07:50.632602 2025] [:error] [pid 13412:tid 13423] [client 20.251.203.255:46293] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/about.php"] [unique_id "aR-RNn3-knz3ZB6HogHHRAAAAMY"]
[Fri Nov 21 06:08:00.680022 2025] [:error] [pid 13325:tid 13349] [client 20.251.203.255:46281] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/install.php"] [unique_id "aR-RQCBUXj9tD75On3CswQAAABM"]
[Fri Nov 21 06:08:01.740876 2025] [:error] [pid 13327:tid 13404] [client 20.251.203.255:61993] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/install.php"] [unique_id "aR-RQfBXf-8B6mFkLeOkkgAAAJM"]
[Fri Nov 21 06:08:03.155809 2025] [:error] [pid 13326:tid 13364] [client 20.251.203.255:46279] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/install.php"] [unique_id "aR-RQ9h942-HkDIkOWru-gAAAEY"]
[Fri Nov 21 06:08:04.720650 2025] [:error] [pid 13412:tid 13422] [client 20.251.203.255:60648] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/install.php"] [unique_id "aR-RRH3-knz3ZB6HogHHVQAAAMU"]
[Fri Nov 21 06:08:05.811705 2025] [:error] [pid 13327:tid 13399] [client 20.251.203.255:61961] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/1.php"] [unique_id "aR-RRfBXf-8B6mFkLeOkmAAAAI4"]
[Fri Nov 21 06:08:07.893193 2025] [:error] [pid 13326:tid 13380] [client 20.251.203.255:46289] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/1.php"] [unique_id "aR-RR9h942-HkDIkOWrvAgAAAFY"]
[Fri Nov 21 06:08:08.525281 2025] [:error] [pid 13327:tid 13400] [client 85.8.130.75:25513] [client 85.8.130.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.75, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-RSPBXf-8B6mFkLeOknQAAAI8"]
[Fri Nov 21 06:08:09.281509 2025] [:error] [pid 13325:tid 13348] [client 20.251.203.255:61972] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/1.php"] [unique_id "aR-RSSBUXj9tD75On3CsyQAAABI"]
[Fri Nov 21 06:08:11.247607 2025] [:error] [pid 13327:tid 13405] [client 20.251.203.255:60654] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/1.php"] [unique_id "aR-RS_BXf-8B6mFkLeOkoAAAAJQ"]
[Fri Nov 21 06:08:12.616191 2025] [:error] [pid 51434:tid 51438] [client 20.251.203.255:61981] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/admin.php"] [unique_id "aR-RTPU96liplEDkw_T6uwAAAQI"]
[Fri Nov 21 06:08:14.071029 2025] [:error] [pid 13326:tid 13374] [client 20.251.203.255:61995] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/admin.php"] [unique_id "aR-RTth942-HkDIkOWrvBwAAAFA"]
[Fri Nov 21 06:08:15.541227 2025] [:error] [pid 13412:tid 13422] [client 20.251.203.255:60628] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/admin.php"] [unique_id "aR-RT33-knz3ZB6HogHHYAAAAMU"]
[Fri Nov 21 06:08:16.745248 2025] [:error] [pid 13412:tid 13421] [client 20.251.203.255:47913] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/admin.php"] [unique_id "aR-RUH3-knz3ZB6HogHHYwAAAMQ"]
[Fri Nov 21 06:08:18.632446 2025] [:error] [pid 51434:tid 51440] [client 20.251.203.255:61961] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "aR-RUvU96liplEDkw_T6vgAAAQQ"]
[Fri Nov 21 06:08:19.840369 2025] [:error] [pid 13327:tid 13391] [client 20.251.203.255:16761] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "aR-RU_BXf-8B6mFkLeOkqAAAAIY"]
[Fri Nov 21 06:08:21.176411 2025] [:error] [pid 13327:tid 13401] [client 20.251.203.255:61966] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "aR-RVfBXf-8B6mFkLeOkqgAAAJA"]
[Fri Nov 21 06:08:22.439228 2025] [:error] [pid 13327:tid 13395] [client 20.251.203.255:60614] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/pwnd/gecko.php"] [unique_id "aR-RVvBXf-8B6mFkLeOkrAAAAIo"]
[Fri Nov 21 06:08:25.156230 2025] [:error] [pid 13327:tid 13403] [client 20.251.203.255:61967] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/lock.php"] [unique_id "aR-RWfBXf-8B6mFkLeOksAAAAJI"]
[Fri Nov 21 06:08:26.123338 2025] [:error] [pid 13412:tid 13424] [client 20.251.203.255:61986] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/lock.php"] [unique_id "aR-RWn3-knz3ZB6HogHHbgAAAMc"]
[Fri Nov 21 06:08:27.152912 2025] [:error] [pid 13325:tid 13340] [client 20.251.203.255:61977] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/lock.php"] [unique_id "aR-RWyBUXj9tD75On3Cs5wAAAAo"]
[Fri Nov 21 06:08:28.462001 2025] [:error] [pid 13412:tid 13437] [client 20.251.203.255:60644] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/lock.php"] [unique_id "aR-RXH3-knz3ZB6HogHHcwAAANQ"]
[Fri Nov 21 06:08:30.483850 2025] [:error] [pid 13412:tid 13426] [client 20.251.203.255:46332] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/item.php"] [unique_id "aR-RXn3-knz3ZB6HogHHeQAAAMk"]
[Fri Nov 21 06:08:31.822722 2025] [:error] [pid 13325:tid 13338] [client 20.251.203.255:61999] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/item.php"] [unique_id "aR-RXyBUXj9tD75On3Cs8wAAAAg"]
[Fri Nov 21 06:08:33.186250 2025] [:error] [pid 13412:tid 13424] [client 20.251.203.255:61982] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/item.php"] [unique_id "aR-RYX3-knz3ZB6HogHHkwAAAMc"]
[Fri Nov 21 06:08:34.186078 2025] [:error] [pid 13325:tid 13352] [client 20.251.203.255:61973] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/assets/item.php"] [unique_id "aR-RYiBUXj9tD75On3CtDwAAABY"]
[Fri Nov 21 06:08:35.240866 2025] [:error] [pid 13325:tid 13335] [client 20.251.203.255:47903] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/system.php"] [unique_id "aR-RYyBUXj9tD75On3CtEgAAAAU"]
[Fri Nov 21 06:08:36.766835 2025] [:error] [pid 51434:tid 51453] [client 20.251.203.255:60670] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about/wp-conflg.php"] [unique_id "aR-RZPU96liplEDkw_T60wAAARE"]
[Fri Nov 21 06:08:38.033711 2025] [:error] [pid 13325:tid 13354] [client 20.251.203.255:46333] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about/wp-conflg.php"] [unique_id "aR-RZiBUXj9tD75On3CtFQAAABg"]
[Fri Nov 21 06:08:40.467909 2025] [:error] [pid 13412:tid 13423] [client 20.251.203.255:47874] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about/wp-conflg.php"] [unique_id "aR-RaH3-knz3ZB6HogHHmQAAAMY"]
[Fri Nov 21 06:08:41.730863 2025] [:error] [pid 51434:tid 51447] [client 20.251.203.255:46312] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about/wp-conflg.php"] [unique_id "aR-RafU96liplEDkw_T62AAAAQs"]
[Fri Nov 21 06:08:43.285856 2025] [:error] [pid 13325:tid 13337] [client 20.251.203.255:61964] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/Assets/admin.php"] [unique_id "aR-RayBUXj9tD75On3CtGAAAAAc"]
[Fri Nov 21 06:08:45.323523 2025] [:error] [pid 13412:tid 13425] [client 20.251.203.255:46286] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/Assets/admin.php"] [unique_id "aR-RbX3-knz3ZB6HogHHnQAAAMg"]
[Fri Nov 21 06:08:47.399750 2025] [:error] [pid 13412:tid 13440] [client 20.251.203.255:60608] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/Assets/admin.php"] [unique_id "aR-Rb33-knz3ZB6HogHHngAAANc"]
[Fri Nov 21 06:08:48.858715 2025] [:error] [pid 13325:tid 13349] [client 20.251.203.255:61996] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/Assets/admin.php"] [unique_id "aR-RcCBUXj9tD75On3CtIQAAABM"]
[Fri Nov 21 06:08:49.583716 2025] [:error] [pid 13326:tid 13376] [client 20.251.203.255:47923] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/alfa-rex.php"] [unique_id "aR-Rcdh942-HkDIkOWrvKwAAAFI"]
[Fri Nov 21 06:08:51.081594 2025] [:error] [pid 13325:tid 13340] [client 20.251.203.255:61952] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR-RcyBUXj9tD75On3CtJAAAAAo"]
[Fri Nov 21 06:08:52.997625 2025] [:error] [pid 51434:tid 51439] [client 20.251.203.255:62010] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/about.php"] [unique_id "aR-RdPU96liplEDkw_T65QAAAQM"]
[Fri Nov 21 06:08:55.266028 2025] [:error] [pid 13327:tid 13402] [client 20.251.203.255:16734] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/about.php"] [unique_id "aR-Rd_BXf-8B6mFkLeOk-gAAAJE"]
[Fri Nov 21 06:08:56.682566 2025] [:error] [pid 51434:tid 51446] [client 20.251.203.255:46322] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/about.php"] [unique_id "aR-RePU96liplEDkw_T67AAAAQo"]
[Fri Nov 21 06:09:08.915404 2025] [:error] [pid 51434:tid 51442] [client 20.251.203.255:60638] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/media/about.php"] [unique_id "aR-RhPU96liplEDkw_T6-gAAAQY"]
[Fri Nov 21 06:09:18.297712 2025] [:error] [pid 13326:tid 13375] [client 20.251.203.255:46334] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aR-Rjth942-HkDIkOWrvSgAAAFE"]
[Fri Nov 21 06:09:22.947109 2025] [:error] [pid 13326:tid 13378] [client 20.251.203.255:62012] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "aR-Rkth942-HkDIkOWrvUAAAAFQ"]
[Fri Nov 21 06:09:35.357782 2025] [:error] [pid 13325:tid 13343] [client 20.251.203.255:62014] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/m.php"] [unique_id "aR-RnyBUXj9tD75On3CtbQAAAA0"]
[Fri Nov 21 06:09:37.443567 2025] [:error] [pid 13326:tid 13378] [client 20.251.203.255:16737] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/m.php"] [unique_id "aR-Rodh942-HkDIkOWrvWwAAAFQ"]
[Fri Nov 21 06:09:39.198100 2025] [:error] [pid 13327:tid 13407] [client 20.251.203.255:46315] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/m.php"] [unique_id "aR-Ro_BXf-8B6mFkLeOlGwAAAJY"]
[Fri Nov 21 06:09:42.318727 2025] [:error] [pid 13325:tid 13330] [client 20.251.203.255:61990] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/m.php"] [unique_id "aR-RpiBUXj9tD75On3CtgAAAAAA"]
[Fri Nov 21 06:09:44.017445 2025] [:error] [pid 13325:tid 13343] [client 20.251.203.255:46277] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/wp-pridmag/classwithtostring.php"] [unique_id "aR-RqCBUXj9tD75On3CtgwAAAA0"]
[Fri Nov 21 06:09:51.720267 2025] [:error] [pid 13412:tid 13433] [client 20.251.203.255:60618] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/wp-pridmag/classwithtostring.php"] [unique_id "aR-Rr33-knz3ZB6HogHH4wAAANA"]
[Fri Nov 21 06:09:52.572170 2025] [:error] [pid 13325:tid 13345] [client 20.251.203.255:60624] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/wp-pridmag/classwithtostring.php"] [unique_id "aR-RsCBUXj9tD75On3CtrAAAAA8"]
[Fri Nov 21 06:09:53.335663 2025] [:error] [pid 13325:tid 13347] [client 20.251.203.255:62015] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/wp-pridmag/classwithtostring.php"] [unique_id "aR-RsSBUXj9tD75On3CtsAAAABE"]
[Fri Nov 21 06:09:54.725976 2025] [:error] [pid 13325:tid 13340] [client 20.251.203.255:46306] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aR-RsiBUXj9tD75On3CttQAAAAo"]
[Fri Nov 21 06:09:58.928004 2025] [:error] [pid 13327:tid 13400] [client 20.251.203.255:60623] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aR-RtvBXf-8B6mFkLeOlJQAAAI8"]
[Fri Nov 21 06:10:01.314879 2025] [:error] [pid 51434:tid 51456] [client 20.251.203.255:61975] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aR-RufU96liplEDkw_T7KgAAARQ"]
[Fri Nov 21 06:10:02.987695 2025] [:error] [pid 51434:tid 51444] [client 20.251.203.255:46330] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "aR-RuvU96liplEDkw_T7LwAAAQg"]
[Fri Nov 21 06:10:05.223867 2025] [:error] [pid 13327:tid 13397] [client 20.251.203.255:61968] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/upload/wp-info.php"] [unique_id "aR-RvfBXf-8B6mFkLeOlLgAAAIw"]
[Fri Nov 21 06:10:06.144413 2025] [:error] [pid 13325:tid 13330] [client 20.251.203.255:47898] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/upload/wp-info.php"] [unique_id "aR-RviBUXj9tD75On3CtwgAAAAA"]
[Fri Nov 21 06:10:09.688255 2025] [:error] [pid 13327:tid 13388] [client 20.251.203.255:61980] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/upload/wp-info.php"] [unique_id "aR-RwfBXf-8B6mFkLeOlNQAAAIM"]
[Fri Nov 21 06:10:11.925584 2025] [:error] [pid 13327:tid 13406] [client 20.251.203.255:46272] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/upload/wp-info.php"] [unique_id "aR-Rw_BXf-8B6mFkLeOlOAAAAJU"]
[Fri Nov 21 06:10:15.597505 2025] [:error] [pid 13325:tid 13345] [client 20.251.203.255:46323] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/gel4y.php"] [unique_id "aR-RxyBUXj9tD75On3Ct0QAAAA8"]
[Fri Nov 21 06:10:19.080413 2025] [:error] [pid 13326:tid 13376] [client 20.251.203.255:46276] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/gel4y.php"] [unique_id "aR-Ry9h942-HkDIkOWrvoAAAAFI"]
[Fri Nov 21 06:10:22.383465 2025] [:error] [pid 13327:tid 13390] [client 20.251.203.255:60636] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/gel4y.php"] [unique_id "aR-RzvBXf-8B6mFkLeOlQAAAAIU"]
[Fri Nov 21 06:10:24.583672 2025] [:error] [pid 13326:tid 13365] [client 20.251.203.255:61954] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/gel4y.php"] [unique_id "aR-R0Nh942-HkDIkOWrvpwAAAEc"]
[Fri Nov 21 06:10:27.685164 2025] [:error] [pid 13325:tid 13337] [client 20.251.203.255:47885] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/rest-api/blue.php"] [unique_id "aR-R0yBUXj9tD75On3Ct5gAAAAc"]
[Fri Nov 21 06:10:32.140792 2025] [:error] [pid 13325:tid 13347] [client 20.251.203.255:46317] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/wp-conflg.php"] [unique_id "aR-R2CBUXj9tD75On3Ct9AAAABE"]
[Fri Nov 21 06:10:56.461018 2025] [:error] [pid 51434:tid 51440] [client 20.251.203.255:46324] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/Response/siteindex.php"] [unique_id "aR-R8PU96liplEDkw_T7cwAAAQQ"]
[Fri Nov 21 06:10:57.260258 2025] [:error] [pid 13325:tid 13342] [client 20.251.203.255:46300] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/blocks/wp-conflg.php"] [unique_id "aR-R8SBUXj9tD75On3CuEgAAAAw"]
[Fri Nov 21 06:11:12.292783 2025] [:error] [pid 13412:tid 13438] [client 20.251.203.255:61987] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/mah.php"] [unique_id "aR-SAH3-knz3ZB6HogHIWQAAANU"]
[Fri Nov 21 06:11:13.296128 2025] [:error] [pid 13412:tid 13420] [client 20.251.203.255:16727] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/pomo/install.php"] [unique_id "aR-SAX3-knz3ZB6HogHIYAAAAMM"]
[Fri Nov 21 06:11:14.966311 2025] [:error] [pid 13327:tid 13397] [client 20.251.203.255:60666] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/packed.php"] [unique_id "aR-SAvBXf-8B6mFkLeOlcAAAAIw"]
[Fri Nov 21 06:11:21.702561 2025] [autoindex:error] [pid 13412:tid 13427] [client 20.251.203.255:16738] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 06:11:22.840377 2025] [:error] [pid 13412:tid 13438] [client 20.251.203.255:16738] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/smilies/network.php"] [unique_id "aR-SCn3-knz3ZB6HogHIdgAAANU"]
[Fri Nov 21 06:11:25.102783 2025] [:error] [pid 51434:tid 51447] [client 20.251.203.255:16429] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aR-SDfU96liplEDkw_T7kQAAAQs"]
[Fri Nov 21 06:11:38.529129 2025] [autoindex:error] [pid 13327:tid 13399] [client 20.251.203.255:16451] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 06:11:42.585011 2025] [:error] [pid 13327:tid 13393] [client 20.251.203.255:16451] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/403.php"] [unique_id "aR-SHvBXf-8B6mFkLeOllwAAAIg"]
[Fri Nov 21 06:11:44.680506 2025] [:error] [pid 13326:tid 13366] [client 20.251.203.255:46730] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/403.php"] [unique_id "aR-SINh942-HkDIkOWrv5gAAAEg"]
[Fri Nov 21 06:11:46.554931 2025] [:error] [pid 13412:tid 13427] [client 20.251.203.255:46759] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/403.php"] [unique_id "aR-SIn3-knz3ZB6HogHIjQAAAMo"]
[Fri Nov 21 06:11:49.720091 2025] [:error] [pid 51434:tid 51445] [client 20.251.203.255:46762] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/403.php"] [unique_id "aR-SJfU96liplEDkw_T7xwAAAQk"]
[Fri Nov 21 06:11:51.068508 2025] [:error] [pid 13326:tid 13382] [client 20.251.203.255:47813] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/plugins.php"] [unique_id "aR-SJ9h942-HkDIkOWrv6QAAAFg"]
[Fri Nov 21 06:11:52.973388 2025] [:error] [pid 13412:tid 13432] [client 20.251.203.255:47851] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/plugins.php"] [unique_id "aR-SKH3-knz3ZB6HogHIkAAAAM8"]
[Fri Nov 21 06:11:57.282422 2025] [:error] [pid 13326:tid 13367] [client 20.251.203.255:59941] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/plugins.php"] [unique_id "aR-SLdh942-HkDIkOWrv7wAAAEk"]
[Fri Nov 21 06:12:04.170210 2025] [:error] [pid 13326:tid 13382] [client 20.251.203.255:59935] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/plugins.php"] [unique_id "aR-SNNh942-HkDIkOWrv-AAAAFg"]
[Fri Nov 21 06:12:12.903216 2025] [:error] [pid 51434:tid 51458] [client 20.251.203.255:16886] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aR-SPPU96liplEDkw_T73QAAARY"]
[Fri Nov 21 06:12:34.792889 2025] [:error] [pid 51434:tid 51440] [client 20.251.203.255:16895] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/plugin.php"] [unique_id "aR-SUvU96liplEDkw_T78wAAAQQ"]
[Fri Nov 21 06:12:46.157383 2025] [:error] [pid 51434:tid 51441] [client 20.251.203.255:47335] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aR-SXvU96liplEDkw_T7_AAAAQU"]
[Fri Nov 21 06:13:03.429812 2025] [:error] [pid 13412:tid 13439] [client 20.251.203.255:65299] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "aR-Sb33-knz3ZB6HogHI4QAAANY"]
[Fri Nov 21 06:13:09.254481 2025] [:error] [pid 13325:tid 13344] [client 20.251.203.255:65329] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aR-SdSBUXj9tD75On3CvGQAAAA4"]
[Fri Nov 21 06:13:18.924599 2025] [:error] [pid 51434:tid 51443] [client 20.251.203.255:61911] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "wendybinks.com"] [uri "/filemanager.php"] [unique_id "aR-SfvU96liplEDkw_T8GQAAAQc"]
[Fri Nov 21 06:13:21.404861 2025] [:error] [pid 13327:tid 13397] [client 20.251.203.255:46349] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "aR-SgfBXf-8B6mFkLeOmVQAAAIw"]
[Fri Nov 21 06:13:28.461993 2025] [:error] [pid 13326:tid 13365] [client 20.251.203.255:16565] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/Diff/about.php"] [unique_id "aR-SiNh942-HkDIkOWrwawAAAEc"]
[Fri Nov 21 06:13:31.193691 2025] [:error] [pid 13326:tid 13366] [client 20.251.203.255:44008] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/about.php"] [unique_id "aR-Si9h942-HkDIkOWrwbAAAAEg"]
[Fri Nov 21 06:13:32.862654 2025] [proxy_fcgi:error] [pid 13327:tid 13390] [client 20.251.203.255:63356] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 06:13:37.699695 2025] [:error] [pid 13327:tid 13403] [client 20.251.203.255:63356] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/class-config.php"] [unique_id "aR-SkfBXf-8B6mFkLeOmagAAAJI"]
[Fri Nov 21 06:13:41.070898 2025] [:error] [pid 51434:tid 51448] [client 20.251.203.255:60053] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/class-config.php"] [unique_id "aR-SlfU96liplEDkw_T8LQAAAQw"]
[Fri Nov 21 06:13:42.841346 2025] [:error] [pid 13326:tid 13361] [client 20.251.203.255:62796] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/class-config.php"] [unique_id "aR-Slth942-HkDIkOWrwdgAAAEM"]
[Fri Nov 21 06:13:45.594235 2025] [:error] [pid 13326:tid 13365] [client 20.251.203.255:16568] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mail.php/wp-includes/ID3/class-config.php"] [unique_id "aR-Smdh942-HkDIkOWrweAAAAEc"]
[Fri Nov 21 06:13:47.518592 2025] [:error] [pid 13325:tid 13345] [client 20.251.203.255:16531] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aR-SmyBUXj9tD75On3CvcgAAAA8"]
[Fri Nov 21 06:13:49.777562 2025] [:error] [pid 13326:tid 13363] [client 20.251.203.255:62794] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/html-api/cloud.php"] [unique_id "aR-Sndh942-HkDIkOWrwfQAAAEU"]
[Fri Nov 21 06:13:52.132217 2025] [:error] [pid 51434:tid 51442] [client 20.251.203.255:44717] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/wp-includes/alfa-rex.php"] [unique_id "aR-SoPU96liplEDkw_T8OAAAAQY"]
[Fri Nov 21 06:13:57.292498 2025] [:error] [pid 13325:tid 13342] [client 20.251.203.255:60311] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/index.php"] [unique_id "aR-SpSBUXj9tD75On3CvmwAAAAw"]
[Fri Nov 21 06:13:59.580819 2025] [:error] [pid 13326:tid 13382] [client 20.251.203.255:16550] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/index.php"] [unique_id "aR-Sp9h942-HkDIkOWrwigAAAFg"]
[Fri Nov 21 06:14:04.259377 2025] [:error] [pid 13325:tid 13336] [client 20.251.203.255:44727] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/index.php"] [unique_id "aR-SrCBUXj9tD75On3CvyAAAAAY"]
[Fri Nov 21 06:14:06.949994 2025] [:error] [pid 51434:tid 51456] [client 20.251.203.255:62803] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/index.php"] [unique_id "aR-SrvU96liplEDkw_T8fQAAARQ"]
[Fri Nov 21 06:14:10.186929 2025] [:error] [pid 13412:tid 13429] [client 20.251.203.255:16526] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/classwithtostring.php"] [unique_id "aR-Ssn3-knz3ZB6HogHJXQAAAMw"]
[Fri Nov 21 06:14:16.149914 2025] [:error] [pid 13325:tid 13342] [client 20.251.203.255:63407] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/classwithtostring.php"] [unique_id "aR-SuCBUXj9tD75On3Cv6wAAAAw"]
[Fri Nov 21 06:14:20.629643 2025] [:error] [pid 51434:tid 51449] [client 20.251.203.255:62879] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/classwithtostring.php"] [unique_id "aR-SvPU96liplEDkw_T8nQAAAQ0"]
[Fri Nov 21 06:14:24.065399 2025] [:error] [pid 13412:tid 13421] [client 20.251.203.255:60042] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/pomo/rk2.php"] [unique_id "aR-SwH3-knz3ZB6HogHJkgAAAMQ"]
[Fri Nov 21 06:14:32.154001 2025] [:error] [pid 13325:tid 13331] [client 20.251.203.255:62901] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aR-SyCBUXj9tD75On3CwEwAAAAE"]
[Fri Nov 21 06:14:34.853978 2025] [:error] [pid 13412:tid 13434] [client 20.251.203.255:62866] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aR-Syn3-knz3ZB6HogHJqAAAANE"]
[Fri Nov 21 06:14:54.313489 2025] [proxy_fcgi:error] [pid 13412:tid 13424] [client 20.251.203.255:62900] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 06:14:54.614384 2025] [:error] [pid 13412:tid 13425] [client 20.251.203.255:62900] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/crop/shell.php"] [unique_id "aR-S3n3-knz3ZB6HogHJ7QAAAMg"]
[Fri Nov 21 06:15:13.043303 2025] [:error] [pid 13412:tid 13429] [client 20.251.203.255:16619] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sodium_compat/autoload_classmap.php"] [unique_id "aR-S8X3-knz3ZB6HogHKBwAAAMw"]
[Fri Nov 21 06:15:23.885772 2025] [:error] [pid 51434:tid 51460] [client 20.251.203.255:62882] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aR-S-_U96liplEDkw_T9KwAAARg"]
[Fri Nov 21 06:15:29.285890 2025] [:error] [pid 17882:tid 17886] [client 20.251.203.255:45879] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aR-TAYwFFssEn348h94CAAAAAUI"]
[Fri Nov 21 06:15:37.509566 2025] [:error] [pid 17882:tid 17889] [client 20.251.203.255:16716] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aR-TCYwFFssEn348h94CGAAAAUU"]
[Fri Nov 21 06:16:01.459221 2025] [:error] [pid 51434:tid 51442] [client 20.251.203.255:63309] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/media/text.php"] [unique_id "aR-TIfU96liplEDkw_T9gwAAAQY"]
[Fri Nov 21 06:16:14.315417 2025] [:error] [pid 13325:tid 13353] [client 20.251.203.255:17319] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/muse.php"] [unique_id "aR-TLiBUXj9tD75On3Cw4wAAABc"]
[Fri Nov 21 06:16:21.944768 2025] [:error] [pid 13412:tid 13418] [client 20.251.203.255:60329] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/about.php"] [unique_id "aR-TNX3-knz3ZB6HogHKXwAAAME"]
[Fri Nov 21 06:16:26.332724 2025] [:error] [pid 17882:tid 17891] [client 20.251.203.255:59920] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/php-compat/chosen.php"] [unique_id "aR-TOowFFssEn348h94CegAAAUc"]
[Fri Nov 21 06:16:31.647901 2025] [:error] [pid 13327:tid 13404] [client 20.251.203.255:16605] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aR-TP_BXf-8B6mFkLeOnTAAAAJM"]
[Fri Nov 21 06:16:33.739642 2025] [:error] [pid 13412:tid 13424] [client 20.251.203.255:60339] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aR-TQX3-knz3ZB6HogHKbAAAAMc"]
[Fri Nov 21 06:16:37.568939 2025] [:error] [pid 51434:tid 51438] [client 20.251.203.255:16578] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aR-TRfU96liplEDkw_T9rQAAAQI"]
[Fri Nov 21 06:16:49.038908 2025] [:error] [pid 13326:tid 13373] [client 20.251.203.255:59916] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/astra/inc/network.php"] [unique_id "aR-TUdh942-HkDIkOWrxVQAAAE8"]
[Fri Nov 21 06:16:51.939250 2025] [:error] [pid 13327:tid 13406] [client 20.251.203.255:17362] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/astra/inc/network.php"] [unique_id "aR-TU_BXf-8B6mFkLeOnbAAAAJU"]
[Fri Nov 21 06:16:55.811064 2025] [:error] [pid 51434:tid 51453] [client 20.251.203.255:46678] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/astra/inc/network.php"] [unique_id "aR-TV_U96liplEDkw_T9yQAAARE"]
[Fri Nov 21 06:16:58.317972 2025] [:error] [pid 13326:tid 13374] [client 20.251.203.255:59934] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/astra/inc/network.php"] [unique_id "aR-TWth942-HkDIkOWrxaQAAAFA"]
[Fri Nov 21 06:16:59.712459 2025] [:error] [pid 13326:tid 13369] [client 20.251.203.255:17293] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shell.php"] [unique_id "aR-TW9h942-HkDIkOWrxbQAAAEs"]
[Fri Nov 21 06:17:02.798698 2025] [:error] [pid 13325:tid 13332] [client 20.251.203.255:60717] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shell.php"] [unique_id "aR-TXiBUXj9tD75On3CxPgAAAAI"]
[Fri Nov 21 06:17:04.830049 2025] [:error] [pid 51434:tid 51460] [client 20.251.203.255:59915] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shell.php"] [unique_id "aR-TYPU96liplEDkw_T90gAAARg"]
[Fri Nov 21 06:17:07.357311 2025] [:error] [pid 13327:tid 13396] [client 20.251.203.255:41206] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shell.php"] [unique_id "aR-TY_BXf-8B6mFkLeOndAAAAIs"]
[Fri Nov 21 06:17:11.967073 2025] [:error] [pid 13326:tid 13381] [client 20.251.203.255:41154] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aR-TZ9h942-HkDIkOWrxdwAAAFc"]
[Fri Nov 21 06:17:16.045711 2025] [:error] [pid 17882:tid 17906] [client 20.251.203.255:43940] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aR-TbIwFFssEn348h94CqgAAAVY"]
[Fri Nov 21 06:17:18.830117 2025] [:error] [pid 17882:tid 17903] [client 20.251.203.255:17104] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aR-TbowFFssEn348h94CrQAAAVM"]
[Fri Nov 21 06:17:21.601198 2025] [:error] [pid 13326:tid 13382] [client 20.251.203.255:63305] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/wp-conflg.php"] [unique_id "aR-Tcdh942-HkDIkOWrxegAAAFg"]
[Fri Nov 21 06:17:23.548885 2025] [:error] [pid 13326:tid 13359] [client 20.251.203.255:17112] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aR-Tc9h942-HkDIkOWrxfQAAAEE"]
[Fri Nov 21 06:17:38.090013 2025] [:error] [pid 13412:tid 13434] [client 20.251.203.255:43927] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aR-Tgn3-knz3ZB6HogHKmQAAANE"]
[Fri Nov 21 06:17:46.394945 2025] [:error] [pid 13327:tid 13393] [client 20.251.203.255:43609] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/wp-includes/about.php"] [unique_id "aR-TivBXf-8B6mFkLeOniAAAAIg"]
[Fri Nov 21 06:17:57.452319 2025] [autoindex:error] [pid 13326:tid 13382] [client 20.251.203.255:45768] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 06:18:02.554915 2025] [:error] [pid 13326:tid 13378] [client 20.251.203.255:45768] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shell20211028.php"] [unique_id "aR-Tmth942-HkDIkOWrxkgAAAFQ"]
[Fri Nov 21 06:18:04.918544 2025] [:error] [pid 13327:tid 13405] [client 20.251.203.255:39848] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shell20211028.php"] [unique_id "aR-TnPBXf-8B6mFkLeOnkwAAAJQ"]
[Fri Nov 21 06:18:06.674279 2025] [:error] [pid 17882:tid 17900] [client 20.251.203.255:39850] [client 20.251.203.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shell20211028.php"] [unique_id "aR-TnowFFssEn348h94CzAAAAVA"]
[Fri Nov 21 06:19:06.869048 2025] [:error] [pid 13325:tid 13348] [client 20.251.203.255:60640] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aR-T2iBUXj9tD75On3CxkgAAABI"]
[Fri Nov 21 06:19:13.186270 2025] [:error] [pid 51434:tid 51438] [client 20.251.203.255:47808] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aR-T4fU96liplEDkw_T-JwAAAQI"]
[Fri Nov 21 06:19:34.413988 2025] [:error] [pid 13327:tid 13400] [client 20.251.203.255:65301] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aR-T9vBXf-8B6mFkLeOn0QAAAI8"]
[Fri Nov 21 06:19:47.670129 2025] [autoindex:error] [pid 51434:tid 51438] [client 20.251.203.255:61975] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Fri Nov 21 06:19:49.960547 2025] [:error] [pid 51434:tid 51458] [client 20.251.203.255:61975] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/Utility/cc.php"] [unique_id "aR-UBfU96liplEDkw_T-jAAAARY"]
[Fri Nov 21 06:19:51.611449 2025] [:error] [pid 13325:tid 13337] [client 20.251.203.255:43985] [client 20.251.203.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aR-UByBUXj9tD75On3CxrgAAAAc"]
[Fri Nov 21 06:34:44.186889 2025] [:error] [pid 13326:tid 13380] [client 85.8.130.50:30273] [client 85.8.130.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.50, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-XhNh942-HkDIkOWr3hgAAAFY"]
[Fri Nov 21 06:55:13.319021 2025] [:error] [pid 13325:tid 13348] [client 170.106.35.153:41386] [client 170.106.35.153] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aR-cUSBUXj9tD75On3DAPgAAABI"]
[Fri Nov 21 07:01:04.349743 2025] [:error] [pid 51434:tid 51444] [client 85.8.130.49:60801] [client 85.8.130.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.49, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-dsPU96liplEDkw_QOXQAAAQg"]
[Fri Nov 21 07:01:04.350014 2025] [:error] [pid 51434:tid 51441] [client 85.8.130.61:23023] [client 85.8.130.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.61, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-dsPU96liplEDkw_QOXgAAAQU"]
[Fri Nov 21 07:24:42.510808 2025] [:error] [pid 13325:tid 13350] [client 85.8.130.84:44569] [client 85.8.130.84] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.84, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-jOiBUXj9tD75On3DJrwAAABQ"]
[Fri Nov 21 07:24:42.511756 2025] [:error] [pid 17882:tid 17886] [client 85.8.130.91:34365] [client 85.8.130.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.91, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-jOowFFssEn348h94iqQAAAUI"]
[Fri Nov 21 07:50:31.315185 2025] [:error] [pid 17882:tid 17904] [client 85.8.130.51:51151] [client 85.8.130.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.51, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-pR4wFFssEn348h94siQAAAVQ"]
[Fri Nov 21 08:14:09.950747 2025] [:error] [pid 46276:tid 46297] [client 85.8.130.91:50471] [client 85.8.130.91] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.91, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-u0XbpxuSAfajqqKOqrgAAAg4"]
[Fri Nov 21 08:40:16.423174 2025] [:error] [pid 13327:tid 13385] [client 85.8.130.62:25819] [client 85.8.130.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.62, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-08PBXf-8B6mFkLePGzQAAAIA"]
[Fri Nov 21 09:06:26.752340 2025] [:error] [pid 17882:tid 17892] [client 85.8.130.49:56647] [client 85.8.130.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.49, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-7EowFFssEn348h95ECAAAAUg"]
[Fri Nov 21 09:06:26.753698 2025] [:error] [pid 17882:tid 17907] [client 85.8.130.86:58633] [client 85.8.130.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.86, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR-7EowFFssEn348h95ECQAAAVc"]
[Fri Nov 21 10:06:59.515056 2025] [:error] [pid 13325:tid 13336] [client 85.8.130.80:32411] [client 85.8.130.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.80, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR_JQyBUXj9tD75On3DppgAAAAY"]
[Fri Nov 21 10:06:59.533600 2025] [:error] [pid 13412:tid 13429] [client 85.8.130.55:35221] [client 85.8.130.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.55, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR_JQ33-knz3ZB6HogH4vAAAAMw"]
[Fri Nov 21 10:34:22.033050 2025] [:error] [pid 46276:tid 46294] [client 85.8.130.61:62043] [client 85.8.130.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.61, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR_PrnbpxuSAfajqqKPBCQAAAgs"]
[Fri Nov 21 11:14:46.923863 2025] [:error] [pid 13327:tid 13409] [client 85.8.130.80:26635] [client 85.8.130.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.80, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR_ZJvBXf-8B6mFkLePaPgAAAJg"]
[Fri Nov 21 11:14:46.923936 2025] [:error] [pid 46237:tid 46251] [client 85.8.130.71:61499] [client 85.8.130.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.71, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR_ZJio2qlis7MUDbMIkmwAAAcw"]
[Fri Nov 21 11:35:14.954648 2025] [autoindex:error] [pid 17882:tid 17888] [client 159.203.172.143:54515] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Fri Nov 21 11:59:12.131898 2025] [:error] [pid 51434:tid 51439] [client 85.8.130.55:32143] [client 85.8.130.55] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.55, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR_jkPU96liplEDkw_Q_UQAAAQM"]
[Fri Nov 21 13:44:28.553036 2025] [:error] [pid 17882:tid 17898] [client 85.8.130.74:64861] [client 85.8.130.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.74, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aR_8PIwFFssEn348h96v_QAAAU4"]
[Fri Nov 21 15:43:01.234065 2025] [:error] [pid 25554:tid 25569] [client 85.8.130.61:26241] [client 85.8.130.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.61, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSAYBR-NtB-9AzFZrk48tgAAAQs"]
[Fri Nov 21 16:54:49.818125 2025] [:error] [pid 25430:tid 25474] [client 85.8.130.50:50389] [client 85.8.130.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.50, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSAo2apnWJcWt_4foXlYBQAAAE4"]
[Fri Nov 21 17:26:46.644874 2025] [:error] [pid 25554:tid 25578] [client 85.8.130.72:24493] [client 85.8.130.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.72, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSAwVh-NtB-9AzFZrk50WQAAARQ"]
[Fri Nov 21 18:38:57.660892 2025] [:error] [pid 25554:tid 25576] [client 85.8.130.71:39165] [client 85.8.130.71] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.71, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSBBQR-NtB-9AzFZrk6JxQAAARI"]
[Fri Nov 21 18:45:41.560472 2025] [:error] [pid 25431:tid 25497] [client 104.28.240.85:50619] [client 104.28.240.85] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.85, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSBC1cklhXxmoIExII1zJwAAAIo"]
[Fri Nov 21 20:26:08.504631 2025] [:error] [pid 25521:tid 25524] [client 43.156.202.34:46468] [client 43.156.202.34] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aSBaYPhXnBMilDddn3VH0gAAAME"]
[Sat Nov 22 00:38:24.465718 2025] [:error] [pid 49642:tid 49902] [client 104.234.19.102:50775] [client 104.234.19.102] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/style.php"] [unique_id "aSCVgIOXTPSuQfgUUtV-RgAAAIs"]
[Sat Nov 22 00:38:25.050202 2025] [:error] [pid 9180:tid 9186] [client 216.24.219.162:38843] [client 216.24.219.162] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/style.php"] [unique_id "aSCVgbrk9msixUFV2i96qgAAAEQ"]
[Sat Nov 22 00:38:25.554846 2025] [:error] [pid 49642:tid 49912] [client 216.24.219.120:63431] [client 216.24.219.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-content/themes/style.php"] [unique_id "aSCVgYOXTPSuQfgUUtV-RwAAAJU"]
[Sat Nov 22 00:38:26.081510 2025] [:error] [pid 49642:tid 49900] [client 216.24.219.123:20151] [client 216.24.219.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/wp-admin/style.php"] [unique_id "aSCVgoOXTPSuQfgUUtV-SAAAAIk"]
[Sat Nov 22 00:38:26.770832 2025] [:error] [pid 9180:tid 9198] [client 216.24.219.152:32553] [client 216.24.219.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style.php"] [unique_id "aSCVgrrk9msixUFV2i96rwAAAFA"]
[Sat Nov 22 00:38:27.852839 2025] [:error] [pid 49642:tid 49897] [client 216.24.219.144:52005] [client 216.24.219.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/chosen.php"] [unique_id "aSCVg4OXTPSuQfgUUtV-TQAAAIY"]
[Sat Nov 22 00:38:29.007785 2025] [:error] [pid 49641:tid 49829] [client 104.234.19.101:47559] [client 104.234.19.101] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/file.php"] [unique_id "aSCVhVnhuiDak938N_alPgAAAAY"]
[Sat Nov 22 00:38:29.655963 2025] [:error] [pid 49641:tid 49841] [client 216.24.219.120:29175] [client 216.24.219.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/flower.php"] [unique_id "aSCVhVnhuiDak938N_alQAAAABI"]
[Sat Nov 22 00:38:30.159695 2025] [:error] [pid 49642:tid 49914] [client 216.24.219.129:64811] [client 216.24.219.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/gifclass.php"] [unique_id "aSCVhoOXTPSuQfgUUtV-UgAAAJc"]
[Sat Nov 22 00:38:30.731915 2025] [:error] [pid 49643:tid 49922] [client 104.234.19.104:64743] [client 104.234.19.104] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/bless.php"] [unique_id "aSCVhpwUojIRHhF_fj977gAAAMM"]
[Sat Nov 22 00:38:32.775313 2025] [:error] [pid 50057:tid 50065] [client 216.24.219.133:64633] [client 216.24.219.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/class-t.api.php"] [unique_id "aSCViFb9j9fTBoI0sRU2MwAAAQY"]
[Sat Nov 22 00:38:33.292098 2025] [:error] [pid 9180:tid 9199] [client 216.24.219.145:60907] [client 216.24.219.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/blurbs.php"] [unique_id "aSCVibrk9msixUFV2i96vgAAAFE"]
[Sat Nov 22 00:38:33.856731 2025] [:error] [pid 9180:tid 9198] [client 216.24.219.158:49985] [client 216.24.219.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/akcc.php"] [unique_id "aSCVibrk9msixUFV2i96wQAAAFA"]
[Sat Nov 22 00:38:36.039719 2025] [:error] [pid 50057:tid 50073] [client 216.24.219.130:50069] [client 216.24.219.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/abcd.php"] [unique_id "aSCVjFb9j9fTBoI0sRU2OgAAAQ4"]
[Sat Nov 22 00:38:36.833468 2025] [:error] [pid 9180:tid 9202] [client 216.24.219.151:38313] [client 216.24.219.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "wendybinks.com"] [uri "/aku.php"] [unique_id "aSCVjLrk9msixUFV2i963AAAAFQ"]
[Sat Nov 22 01:22:56.946150 2025] [:error] [pid 49642:tid 49912] [client 112.134.141.16:62194] [client 112.134.141.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.134.141.16, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSCf8IOXTPSuQfgUUtWPLQAAAJU"]
[Sat Nov 22 02:44:03.594604 2025] [:error] [pid 49643:tid 49938] [client 49.7.227.204:51774] [client 49.7.227.204] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSCy85wUojIRHhF_fj-kyQAAANI"]
[Sat Nov 22 02:58:44.322113 2025] [:error] [pid 49642:tid 49906] [client 64.225.4.240:44738] [client 64.225.4.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aSC2ZIOXTPSuQfgUUtWrhAAAAI8"]
[Sat Nov 22 03:01:40.965240 2025] [:error] [pid 9180:tid 9186] [client 43.157.38.228:44330] [client 43.157.38.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSC3FLrk9msixUFV2i-9gwAAAEQ"]
[Sat Nov 22 03:53:16.015059 2025] [:error] [pid 53566:tid 53588] [client 103.167.150.158:59353] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/media/system/js/core.js"] [unique_id "aSDDLMbSHDBkRbwMbd7w7AAAANQ"]
[Sat Nov 22 04:30:24.371409 2025] [:error] [pid 53477:tid 53494] [client 64.225.4.240:43242] [client 64.225.4.240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.git/config"] [unique_id "aSDL4H7Lu30Ku9O40aKv0AAAAA0"]
[Sat Nov 22 05:21:53.033492 2025] [autoindex:error] [pid 53566:tid 53587] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:53.160021 2025] [autoindex:error] [pid 53566:tid 53572] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:53.256933 2025] [autoindex:error] [pid 53566:tid 53569] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:53.379932 2025] [autoindex:error] [pid 53566:tid 53589] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:55.736309 2025] [autoindex:error] [pid 53566:tid 53570] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/l10n/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:55.836593 2025] [autoindex:error] [pid 53566:tid 53588] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2023/11/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:55.946151 2025] [autoindex:error] [pid 53566:tid 53574] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sodium_compat/lib/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:56.069471 2025] [autoindex:error] [pid 53566:tid 53575] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/blocks/file/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:56.235490 2025] [autoindex:error] [pid 53566:tid 53585] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:56.373484 2025] [autoindex:error] [pid 53566:tid 53577] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-bindings/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:56.602207 2025] [autoindex:error] [pid 53566:tid 53569] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:58.464490 2025] [autoindex:error] [pid 53566:tid 53578] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:21:58.591220 2025] [autoindex:error] [pid 53566:tid 53570] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:02.207744 2025] [autoindex:error] [pid 53566:tid 53579] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/blocks/query/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:02.312450 2025] [autoindex:error] [pid 53566:tid 53580] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/langs/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:02.435700 2025] [autoindex:error] [pid 53566:tid 53571] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:02.591191 2025] [autoindex:error] [pid 53566:tid 53592] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/blocks/group/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:06.319931 2025] [autoindex:error] [pid 53566:tid 53578] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/interactivity-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:09.760118 2025] [autoindex:error] [pid 53566:tid 53588] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:13.417303 2025] [autoindex:error] [pid 53566:tid 53587] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/jquery/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:13.521414 2025] [autoindex:error] [pid 53566:tid 53577] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:13.620104 2025] [autoindex:error] [pid 53566:tid 53568] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:24.068067 2025] [autoindex:error] [pid 53566:tid 53590] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:25.914948 2025] [autoindex:error] [pid 53566:tid 53592] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:26.014861 2025] [autoindex:error] [pid 53566:tid 53571] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:26.303620 2025] [autoindex:error] [pid 53566:tid 53584] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:26.400794 2025] [autoindex:error] [pid 53566:tid 53586] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:26.499083 2025] [autoindex:error] [pid 53566:tid 53581] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:22:31.883412 2025] [autoindex:error] [pid 53566:tid 53574] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:20.482245 2025] [autoindex:error] [pid 53566:tid 53572] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:20.577565 2025] [autoindex:error] [pid 53566:tid 53582] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:20.672390 2025] [autoindex:error] [pid 53566:tid 53576] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:20.773978 2025] [autoindex:error] [pid 53566:tid 53568] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:20.875873 2025] [autoindex:error] [pid 53566:tid 53580] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:20.974560 2025] [autoindex:error] [pid 53566:tid 53571] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:21.071975 2025] [autoindex:error] [pid 53566:tid 53586] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:21.169632 2025] [autoindex:error] [pid 53566:tid 53591] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:23.064893 2025] [autoindex:error] [pid 53566:tid 53584] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:24.991546 2025] [autoindex:error] [pid 53566:tid 53589] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:25.119493 2025] [autoindex:error] [pid 53566:tid 53580] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:25.217326 2025] [autoindex:error] [pid 53566:tid 53571] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:27.252677 2025] [autoindex:error] [pid 53566:tid 53586] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:27.375250 2025] [autoindex:error] [pid 53566:tid 53587] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:27.582763 2025] [autoindex:error] [pid 53566:tid 53575] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:23:27.681428 2025] [autoindex:error] [pid 53566:tid 53584] [client 194.5.82.162:21731] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:10.280235 2025] [autoindex:error] [pid 53479:tid 53554] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:30.213946 2025] [autoindex:error] [pid 53479:tid 53538] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:38.145734 2025] [autoindex:error] [pid 53479:tid 53545] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:38.245032 2025] [autoindex:error] [pid 53479:tid 53552] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:45.775287 2025] [autoindex:error] [pid 53479:tid 53552] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:45.894703 2025] [autoindex:error] [pid 53479:tid 53559] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:46.014255 2025] [autoindex:error] [pid 53479:tid 53536] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:46.119091 2025] [autoindex:error] [pid 53479:tid 53548] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:46.243047 2025] [autoindex:error] [pid 53479:tid 53555] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:46.346331 2025] [autoindex:error] [pid 53479:tid 53557] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:46.453998 2025] [autoindex:error] [pid 53479:tid 53560] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:46.559173 2025] [autoindex:error] [pid 53479:tid 53540] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:24:46.657268 2025] [autoindex:error] [pid 53479:tid 53556] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:25:20.705898 2025] [autoindex:error] [pid 53479:tid 53553] [client 194.5.82.135:61911] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 05:40:11.099237 2025] [:error] [pid 25856:tid 25871] [client 4.219.6.248:31210] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSDcOxsTP0wy94zKUvGpiAAAAQ0"]
[Sat Nov 22 05:40:20.557485 2025] [:error] [pid 53479:tid 53536] [client 4.219.6.248:1563] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/g.php"] [unique_id "aSDcRG6cicFF3Aas-oR0gQAAAIA"]
[Sat Nov 22 05:40:22.923100 2025] [:error] [pid 25856:tid 25867] [client 4.219.6.248:31216] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/g.php"] [unique_id "aSDcRhsTP0wy94zKUvGpnwAAAQk"]
[Sat Nov 22 05:40:27.792098 2025] [:error] [pid 53479:tid 53548] [client 4.219.6.248:1566] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/g.php"] [unique_id "aSDcS26cicFF3Aas-oR0kQAAAIw"]
[Sat Nov 22 05:40:29.594407 2025] [:error] [pid 53479:tid 53547] [client 4.219.6.248:1564] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/g.php"] [unique_id "aSDcTW6cicFF3Aas-oR0kwAAAIs"]
[Sat Nov 22 05:40:31.931442 2025] [:error] [pid 53566:tid 53587] [client 4.219.6.248:1590] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/13.php"] [unique_id "aSDcT8bSHDBkRbwMbd41IwAAANM"]
[Sat Nov 22 05:40:33.984870 2025] [:error] [pid 25856:tid 25860] [client 4.219.6.248:25932] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/13.php"] [unique_id "aSDcURsTP0wy94zKUvGpwQAAAQI"]
[Sat Nov 22 05:40:35.814036 2025] [:error] [pid 53478:tid 53521] [client 4.219.6.248:25964] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/13.php"] [unique_id "aSDcUwhUYdXBbQswAdQPdQAAAEw"]
[Sat Nov 22 05:40:37.132721 2025] [:error] [pid 25856:tid 25860] [client 4.219.6.248:25966] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/13.php"] [unique_id "aSDcVRsTP0wy94zKUvGp0gAAAQI"]
[Sat Nov 22 05:40:39.203026 2025] [:error] [pid 53477:tid 53485] [client 4.219.6.248:1632] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSDcV37Lu30Ku9O40aLZ1wAAAAQ"]
[Sat Nov 22 05:41:07.517893 2025] [:error] [pid 53477:tid 53492] [client 4.219.6.248:1214] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/adminer.php"] [unique_id "aSDcc37Lu30Ku9O40aLaDQAAAAs"]
[Sat Nov 22 05:41:10.449442 2025] [:error] [pid 53566:tid 53586] [client 4.219.6.248:28941] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/adminer.php"] [unique_id "aSDcdsbSHDBkRbwMbd41oAAAANI"]
[Sat Nov 22 05:41:14.653838 2025] [:error] [pid 53479:tid 53554] [client 4.219.6.248:25877] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSDcem6cicFF3Aas-oR1GwAAAJI"]
[Sat Nov 22 05:41:21.375797 2025] [:error] [pid 53479:tid 53541] [client 4.219.6.248:47959] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSDcgW6cicFF3Aas-oR1JwAAAIU"]
[Sat Nov 22 05:41:28.288702 2025] [proxy_fcgi:error] [pid 53479:tid 53537] [client 4.219.6.248:44138] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 05:41:28.554997 2025] [:error] [pid 53479:tid 53545] [client 4.219.6.248:44138] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/0.php"] [unique_id "aSDciG6cicFF3Aas-oR1PgAAAIk"]
[Sat Nov 22 05:41:35.896857 2025] [:error] [pid 53479:tid 53548] [client 4.219.6.248:44889] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSDcj26cicFF3Aas-oR1TgAAAIw"]
[Sat Nov 22 05:41:50.042458 2025] [:error] [pid 25856:tid 25880] [client 4.219.6.248:44126] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/mail.php"] [unique_id "aSDcnhsTP0wy94zKUvGrCgAAARY"]
[Sat Nov 22 05:41:54.242861 2025] [:error] [pid 25856:tid 25875] [client 4.219.6.248:1753] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/mail.php"] [unique_id "aSDcohsTP0wy94zKUvGrHAAAARE"]
[Sat Nov 22 05:42:03.236715 2025] [:error] [pid 25856:tid 25873] [client 4.219.6.248:44906] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/mail.php"] [unique_id "aSDcqxsTP0wy94zKUvGrPwAAAQ8"]
[Sat Nov 22 05:42:06.268782 2025] [:error] [pid 53477:tid 53500] [client 4.219.6.248:44898] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/fm.php"] [unique_id "aSDcrn7Lu30Ku9O40aLabgAAABM"]
[Sat Nov 22 05:42:09.999305 2025] [:error] [pid 53478:tid 53520] [client 4.219.6.248:29547] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/fm.php"] [unique_id "aSDcsQhUYdXBbQswAdQQNAAAAEs"]
[Sat Nov 22 05:42:12.874389 2025] [:error] [pid 53477:tid 53495] [client 4.219.6.248:44909] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/fm.php"] [unique_id "aSDctH7Lu30Ku9O40aLafwAAAA4"]
[Sat Nov 22 05:42:14.639444 2025] [:error] [pid 25856:tid 25876] [client 4.219.6.248:29517] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/fm.php"] [unique_id "aSDcthsTP0wy94zKUvGrcwAAARI"]
[Sat Nov 22 05:42:16.504117 2025] [:error] [pid 25856:tid 25878] [client 4.219.6.248:44124] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/17.php"] [unique_id "aSDcuBsTP0wy94zKUvGreAAAARQ"]
[Sat Nov 22 05:42:18.892986 2025] [:error] [pid 53477:tid 53488] [client 4.219.6.248:44096] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/17.php"] [unique_id "aSDcun7Lu30Ku9O40aLahgAAAAc"]
[Sat Nov 22 05:42:20.158732 2025] [:error] [pid 53479:tid 53541] [client 4.219.6.248:46357] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/17.php"] [unique_id "aSDcvG6cicFF3Aas-oR1jQAAAIU"]
[Sat Nov 22 05:42:24.531558 2025] [:error] [pid 53566:tid 53569] [client 4.219.6.248:46382] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/17.php"] [unique_id "aSDcwMbSHDBkRbwMbd422wAAAME"]
[Sat Nov 22 05:42:27.632734 2025] [:error] [pid 53477:tid 53483] [client 4.219.6.248:1773] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/0.php"] [unique_id "aSDcw37Lu30Ku9O40aLakQAAAAI"]
[Sat Nov 22 05:42:29.381965 2025] [:error] [pid 53479:tid 53544] [client 4.219.6.248:46347] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/0.php"] [unique_id "aSDcxW6cicFF3Aas-oR1kQAAAIg"]
[Sat Nov 22 05:42:32.307895 2025] [:error] [pid 53566:tid 53575] [client 4.219.6.248:47699] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/0.php"] [unique_id "aSDcyMbSHDBkRbwMbd427QAAAMc"]
[Sat Nov 22 05:42:34.686545 2025] [:error] [pid 53566:tid 53583] [client 4.219.6.248:63704] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/0.php"] [unique_id "aSDcysbSHDBkRbwMbd429wAAAM8"]
[Sat Nov 22 05:42:36.825309 2025] [:error] [pid 25856:tid 25860] [client 4.219.6.248:2010] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSDczBsTP0wy94zKUvGrlwAAAQI"]
[Sat Nov 22 05:42:38.332011 2025] [:error] [pid 53566:tid 53569] [client 4.219.6.248:63773] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSDczsbSHDBkRbwMbd42_AAAAME"]
[Sat Nov 22 05:42:40.849775 2025] [:error] [pid 53566:tid 53591] [client 4.219.6.248:63697] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSDc0MbSHDBkRbwMbd43AwAAANc"]
[Sat Nov 22 05:42:45.770418 2025] [:error] [pid 53477:tid 53495] [client 4.219.6.248:26593] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSDc1X7Lu30Ku9O40aLamAAAAA4"]
[Sat Nov 22 05:42:53.147431 2025] [:error] [pid 25856:tid 25880] [client 4.219.6.248:45704] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSDc3RsTP0wy94zKUvGruAAAARY"]
[Sat Nov 22 05:43:12.690218 2025] [:error] [pid 53478:tid 53520] [client 4.219.6.248:63744] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSDc8AhUYdXBbQswAdQQzgAAAEs"]
[Sat Nov 22 05:43:15.789490 2025] [:error] [pid 25856:tid 25874] [client 4.219.6.248:1285] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/index.php"] [unique_id "aSDc8xsTP0wy94zKUvGr3gAAARA"]
[Sat Nov 22 05:43:44.465595 2025] [:error] [pid 53478:tid 53512] [client 4.219.6.248:1287] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/q.php"] [unique_id "aSDdEAhUYdXBbQswAdQQ5AAAAEM"]
[Sat Nov 22 05:43:46.426215 2025] [:error] [pid 53478:tid 53528] [client 4.219.6.248:1311] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/q.php"] [unique_id "aSDdEghUYdXBbQswAdQQ6AAAAFM"]
[Sat Nov 22 05:43:49.413032 2025] [:error] [pid 53479:tid 53545] [client 4.219.6.248:1377] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/q.php"] [unique_id "aSDdFW6cicFF3Aas-oR1_AAAAIk"]
[Sat Nov 22 05:43:51.913992 2025] [:error] [pid 25856:tid 25881] [client 4.219.6.248:1282] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/q.php"] [unique_id "aSDdFxsTP0wy94zKUvGsGgAAARc"]
[Sat Nov 22 05:43:53.754511 2025] [:error] [pid 53566:tid 53591] [client 4.219.6.248:44000] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/123.php"] [unique_id "aSDdGcbSHDBkRbwMbd44LgAAANc"]
[Sat Nov 22 05:44:04.113841 2025] [:error] [pid 53478:tid 53523] [client 4.219.6.248:1386] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/123.php"] [unique_id "aSDdJAhUYdXBbQswAdQRAQAAAE4"]
[Sat Nov 22 05:44:06.149065 2025] [:error] [pid 53479:tid 53560] [client 4.219.6.248:1309] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/123.php"] [unique_id "aSDdJm6cicFF3Aas-oR2EwAAAJg"]
[Sat Nov 22 05:45:04.977559 2025] [:error] [pid 53477:tid 53486] [client 4.219.6.248:28181] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/403.php"] [unique_id "aSDdYH7Lu30Ku9O40aLbJgAAAAU"]
[Sat Nov 22 05:45:07.004165 2025] [:error] [pid 25856:tid 25881] [client 4.219.6.248:45186] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/403.php"] [unique_id "aSDdYxsTP0wy94zKUvGs_wAAARc"]
[Sat Nov 22 05:45:17.927327 2025] [:error] [pid 53478:tid 53525] [client 4.219.6.248:64709] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/403.php"] [unique_id "aSDdbQhUYdXBbQswAdQRXgAAAFA"]
[Sat Nov 22 05:45:20.382637 2025] [:error] [pid 53479:tid 53544] [client 4.219.6.248:29024] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSDdcG6cicFF3Aas-oR2hwAAAIg"]
[Sat Nov 22 05:45:26.548662 2025] [:error] [pid 53479:tid 53540] [client 4.219.6.248:45282] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSDddm6cicFF3Aas-oR2jAAAAIQ"]
[Sat Nov 22 05:45:29.383654 2025] [:error] [pid 25856:tid 25861] [client 4.219.6.248:29021] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSDdeRsTP0wy94zKUvGtEwAAAQM"]
[Sat Nov 22 05:45:33.005867 2025] [:error] [pid 25856:tid 25871] [client 4.219.6.248:64756] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSDdfRsTP0wy94zKUvGtHQAAAQ0"]
[Sat Nov 22 05:45:36.826921 2025] [:error] [pid 25856:tid 25871] [client 4.219.6.248:25936] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lock360.php"] [unique_id "aSDdgBsTP0wy94zKUvGtKAAAAQ0"]
[Sat Nov 22 05:45:43.994759 2025] [:error] [pid 53477:tid 53503] [client 4.219.6.248:45260] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lock360.php"] [unique_id "aSDdh37Lu30Ku9O40aLbVgAAABY"]
[Sat Nov 22 05:45:45.962288 2025] [:error] [pid 25856:tid 25881] [client 4.219.6.248:1133] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lock360.php"] [unique_id "aSDdiRsTP0wy94zKUvGtOwAAARc"]
[Sat Nov 22 05:45:47.122191 2025] [:error] [pid 53478:tid 53524] [client 4.219.6.248:64746] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lock360.php"] [unique_id "aSDdiwhUYdXBbQswAdQRcQAAAE8"]
[Sat Nov 22 05:45:53.178828 2025] [:error] [pid 25856:tid 25876] [client 4.219.6.248:45258] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/up.php"] [unique_id "aSDdkRsTP0wy94zKUvGtRQAAARI"]
[Sat Nov 22 05:46:01.919424 2025] [:error] [pid 53477:tid 53493] [client 4.219.6.248:1150] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/up.php"] [unique_id "aSDdmX7Lu30Ku9O40aLbbAAAAAw"]
[Sat Nov 22 05:46:13.201434 2025] [:error] [pid 25856:tid 25872] [client 4.219.6.248:29013] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSDdpRsTP0wy94zKUvGtdAAAAQ4"]
[Sat Nov 22 05:46:34.389101 2025] [:error] [pid 53478:tid 53510] [client 4.219.6.248:47716] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSDdughUYdXBbQswAdQRqQAAAEE"]
[Sat Nov 22 05:46:46.036785 2025] [:error] [pid 25856:tid 25872] [client 4.219.6.248:1099] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSDdxhsTP0wy94zKUvGtsAAAAQ4"]
[Sat Nov 22 05:46:52.147920 2025] [:error] [pid 53566:tid 53582] [client 4.219.6.248:2028] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/v4.php"] [unique_id "aSDdzMbSHDBkRbwMbd45QgAAAM4"]
[Sat Nov 22 05:47:00.086755 2025] [:error] [pid 53479:tid 53545] [client 4.219.6.248:46425] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/v4.php"] [unique_id "aSDd1G6cicFF3Aas-oR3NwAAAIk"]
[Sat Nov 22 05:47:01.506111 2025] [:error] [pid 53477:tid 53492] [client 4.219.6.248:46419] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/v4.php"] [unique_id "aSDd1X7Lu30Ku9O40aLbswAAAAs"]
[Sat Nov 22 05:47:03.845508 2025] [:error] [pid 53566:tid 53570] [client 4.219.6.248:1033] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mn.php"] [unique_id "aSDd18bSHDBkRbwMbd45YAAAAMI"]
[Sat Nov 22 05:47:06.342730 2025] [:error] [pid 25856:tid 25878] [client 4.219.6.248:47687] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mn.php"] [unique_id "aSDd2hsTP0wy94zKUvGuCgAAARQ"]
[Sat Nov 22 05:47:16.725455 2025] [:error] [pid 53479:tid 53536] [client 4.219.6.248:46422] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mn.php"] [unique_id "aSDd5G6cicFF3Aas-oR3YwAAAIA"]
[Sat Nov 22 05:47:18.896200 2025] [:error] [pid 53566:tid 53590] [client 4.219.6.248:46422] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-mn.php"] [unique_id "aSDd5sbSHDBkRbwMbd45fAAAANY"]
[Sat Nov 22 05:47:24.989837 2025] [:error] [pid 25856:tid 25879] [client 4.219.6.248:1070] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/222.php"] [unique_id "aSDd7BsTP0wy94zKUvGuKAAAARU"]
[Sat Nov 22 05:47:27.393662 2025] [:error] [pid 53566:tid 53576] [client 4.219.6.248:47993] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/222.php"] [unique_id "aSDd78bSHDBkRbwMbd45iAAAAMg"]
[Sat Nov 22 05:47:29.185164 2025] [:error] [pid 53477:tid 53492] [client 4.219.6.248:2015] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/222.php"] [unique_id "aSDd8X7Lu30Ku9O40aLb5gAAAAs"]
[Sat Nov 22 05:47:31.558565 2025] [:error] [pid 53479:tid 53550] [client 4.219.6.248:64810] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/222.php"] [unique_id "aSDd826cicFF3Aas-oR3dAAAAI4"]
[Sat Nov 22 05:47:32.607581 2025] [:error] [pid 53478:tid 53531] [client 4.219.6.248:25910] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSDd9AhUYdXBbQswAdQSEQAAAFY"]
[Sat Nov 22 05:47:33.868984 2025] [:error] [pid 53566:tid 53577] [client 4.219.6.248:25857] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSDd9cbSHDBkRbwMbd45lwAAAMk"]
[Sat Nov 22 05:47:34.892988 2025] [:error] [pid 53477:tid 53487] [client 4.219.6.248:29555] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSDd9n7Lu30Ku9O40aLb_gAAAAY"]
[Sat Nov 22 05:47:37.348198 2025] [:error] [pid 53478:tid 53524] [client 4.219.6.248:44890] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ALFA_DATA/index.php"] [unique_id "aSDd-QhUYdXBbQswAdQSEgAAAE8"]
[Sat Nov 22 05:47:57.877628 2025] [:error] [pid 25856:tid 25869] [client 4.219.6.248:47337] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSDeDRsTP0wy94zKUvGujwAAAQs"]
[Sat Nov 22 05:48:21.409367 2025] [:error] [pid 53566:tid 53581] [client 4.219.6.248:47342] [client 4.219.6.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/assets/js/wp-config.php"] [unique_id "aSDeJcbSHDBkRbwMbd46BQAAAM0"]
[Sat Nov 22 05:48:26.474909 2025] [:error] [pid 53478:tid 53516] [client 4.219.6.248:1608] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/menu.php"] [unique_id "aSDeKghUYdXBbQswAdQSZAAAAEc"]
[Sat Nov 22 05:48:29.812225 2025] [:error] [pid 53478:tid 53511] [client 4.219.6.248:1708] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/menu.php"] [unique_id "aSDeLQhUYdXBbQswAdQSbgAAAEI"]
[Sat Nov 22 05:48:38.226788 2025] [:error] [pid 53478:tid 53521] [client 4.219.6.248:48952] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/menu.php"] [unique_id "aSDeNghUYdXBbQswAdQSlQAAAEw"]
[Sat Nov 22 05:48:39.755843 2025] [:error] [pid 53479:tid 53536] [client 4.219.6.248:26602] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/menu.php"] [unique_id "aSDeN26cicFF3Aas-oR4DAAAAIA"]
[Sat Nov 22 05:48:41.771189 2025] [:error] [pid 53479:tid 53550] [client 4.219.6.248:46994] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bs1.php"] [unique_id "aSDeOW6cicFF3Aas-oR4EgAAAI4"]
[Sat Nov 22 05:48:43.068286 2025] [:error] [pid 53566:tid 53580] [client 4.219.6.248:48900] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bs1.php"] [unique_id "aSDeO8bSHDBkRbwMbd46SwAAAMw"]
[Sat Nov 22 05:48:46.855121 2025] [:error] [pid 25856:tid 25866] [client 4.219.6.248:48922] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bs1.php"] [unique_id "aSDePhsTP0wy94zKUvGvuAAAAQg"]
[Sat Nov 22 05:48:50.662918 2025] [:error] [pid 25856:tid 25864] [client 4.219.6.248:44861] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bs1.php"] [unique_id "aSDeQhsTP0wy94zKUvGvwAAAAQY"]
[Sat Nov 22 05:48:56.754742 2025] [:error] [pid 53479:tid 53556] [client 4.219.6.248:46981] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/build.php"] [unique_id "aSDeSG6cicFF3Aas-oR4RQAAAJQ"]
[Sat Nov 22 05:49:00.973810 2025] [:error] [pid 53566:tid 53577] [client 4.219.6.248:48947] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/build.php"] [unique_id "aSDeTMbSHDBkRbwMbd46eQAAAMk"]
[Sat Nov 22 05:49:19.649679 2025] [:error] [pid 53477:tid 53494] [client 4.219.6.248:31143] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ab.php"] [unique_id "aSDeX37Lu30Ku9O40aLc6wAAAA0"]
[Sat Nov 22 05:49:20.772237 2025] [:error] [pid 25856:tid 25869] [client 4.219.6.248:47011] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ab.php"] [unique_id "aSDeYBsTP0wy94zKUvGwGgAAAQs"]
[Sat Nov 22 05:49:22.523177 2025] [:error] [pid 53479:tid 53550] [client 4.219.6.248:26514] [client 4.219.6.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ahax.php"] [unique_id "aSDeYm6cicFF3Aas-oR4qAAAAI4"]
[Sat Nov 22 06:56:37.166909 2025] [autoindex:error] [pid 25856:tid 25863] [client 212.116.231.26:60032] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 06:56:37.585454 2025] [:error] [pid 25856:tid 25872] [client 212.116.231.26:60032] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuJRsTP0wy94zKUvHmxwAAAQ4"]
[Sat Nov 22 06:56:38.399024 2025] [:error] [pid 53477:tid 53491] [client 212.116.231.26:60624] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuJn7Lu30Ku9O40aIGmgAAAAo"]
[Sat Nov 22 06:56:39.232657 2025] [:error] [pid 53479:tid 53544] [client 212.116.231.26:32874] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuJ26cicFF3Aas-oShPwAAAIg"]
[Sat Nov 22 06:56:40.046895 2025] [:error] [pid 53479:tid 53557] [client 212.116.231.26:47710] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuKG6cicFF3Aas-oShRQAAAJU"]
[Sat Nov 22 06:56:40.858279 2025] [:error] [pid 53566:tid 53577] [client 212.116.231.26:48140] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/dist/"] [unique_id "aSDuKMbSHDBkRbwMbd5nVgAAAMk"]
[Sat Nov 22 10:43:32.329715 2025] [autoindex:error] [pid 9547:tid 9572] [client 139.59.37.180:63968] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Nov 22 10:57:04.206581 2025] [:error] [pid 53477:tid 53488] [client 64.225.24.70:38356] [client 64.225.24.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aSEmgH7Lu30Ku9O40aJIygAAAAc"]
[Sat Nov 22 12:28:52.209652 2025] [:error] [pid 9547:tid 9573] [client 64.225.24.70:49938] [client 64.225.24.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.git/config"] [unique_id "aSE8BNClOR5qk7DoMeE5_AAAAVQ"]
[Sat Nov 22 16:31:19.285983 2025] [:error] [pid 53478:tid 53523] [client 167.99.181.249:46006] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSF01whUYdXBbQswAdTUDAAAAE4"]
[Sat Nov 22 16:31:19.928325 2025] [:error] [pid 53479:tid 53556] [client 167.99.181.249:46008] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/server"] [unique_id "aSF0126cicFF3Aas-oRiDQAAAJQ"]
[Sat Nov 22 16:31:20.568731 2025] [:error] [pid 53479:tid 53553] [client 167.99.181.249:46016] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/.vscode/sftp.json"] [unique_id "aSF02G6cicFF3Aas-oRiEQAAAJE"]
[Sat Nov 22 16:31:21.212179 2025] [:error] [pid 9547:tid 9572] [client 167.99.181.249:46028] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/about"] [unique_id "aSF02dClOR5qk7DoMeGCzgAAAVM"]
[Sat Nov 22 16:31:21.852690 2025] [:error] [pid 53478:tid 53521] [client 167.99.181.249:46032] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/debug/default/view"] [unique_id "aSF02QhUYdXBbQswAdTUFAAAAEw"]
[Sat Nov 22 16:31:22.495008 2025] [:error] [pid 53566:tid 53572] [client 167.99.181.249:46044] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/v2/_catalog"] [unique_id "aSF02sbSHDBkRbwMbd4IogAAAMQ"]
[Sat Nov 22 16:31:23.135511 2025] [:error] [pid 53477:tid 53504] [client 167.99.181.249:46056] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSF0237Lu30Ku9O40aKVOwAAABc"]
[Sat Nov 22 16:31:23.777360 2025] [:error] [pid 53479:tid 53536] [client 167.99.181.249:46060] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/server-status"] [unique_id "aSF0226cicFF3Aas-oRiIAAAAIA"]
[Sat Nov 22 16:31:24.418358 2025] [:error] [pid 53479:tid 53547] [client 167.99.181.249:46066] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/login.action"] [unique_id "aSF03G6cicFF3Aas-oRiIQAAAIs"]
[Sat Nov 22 16:31:25.059031 2025] [:error] [pid 25856:tid 25879] [client 167.99.181.249:46074] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/_all_dbs"] [unique_id "aSF03RsTP0wy94zKUvGS5wAAARU"]
[Sat Nov 22 16:31:25.699060 2025] [:error] [pid 25856:tid 25880] [client 167.99.181.249:46076] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/.DS_Store"] [unique_id "aSF03RsTP0wy94zKUvGS6QAAARY"]
[Sat Nov 22 16:31:26.339668 2025] [:error] [pid 53477:tid 53493] [client 167.99.181.249:46090] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.env"] [unique_id "aSF03n7Lu30Ku9O40aKVQAAAAAw"]
[Sat Nov 22 16:31:26.981053 2025] [:error] [pid 53566:tid 53580] [client 167.99.181.249:46106] [client 167.99.181.249] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.git/config"] [unique_id "aSF03sbSHDBkRbwMbd4IrgAAAMw"]
[Sat Nov 22 16:31:27.621156 2025] [:error] [pid 9547:tid 9559] [client 167.99.181.249:46108] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSF039ClOR5qk7DoMeGCzwAAAUY"]
[Sat Nov 22 16:31:28.262079 2025] [:error] [pid 9547:tid 9570] [client 167.99.181.249:49974] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/config.json"] [unique_id "aSF04NClOR5qk7DoMeGC0QAAAVE"]
[Sat Nov 22 16:31:28.906055 2025] [:error] [pid 53479:tid 53557] [client 167.99.181.249:49980] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/telescope/requests"] [unique_id "aSF04G6cicFF3Aas-oRiKAAAAJU"]
[Sat Nov 22 16:31:29.552077 2025] [:error] [pid 25856:tid 25874] [client 167.99.181.249:49994] [client 167.99.181.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/info.php"] [unique_id "aSF04RsTP0wy94zKUvGS6wAAARA"]
[Sat Nov 22 18:47:07.930709 2025] [:error] [pid 53477:tid 53502] [client 206.189.2.13:56172] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSGUq37Lu30Ku9O40aK7AgAAABU"]
[Sat Nov 22 18:47:08.969825 2025] [:error] [pid 53478:tid 53525] [client 206.189.2.13:56178] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/server"] [unique_id "aSGUrAhUYdXBbQswAdT4eQAAAFA"]
[Sat Nov 22 18:47:09.790926 2025] [:error] [pid 53479:tid 53554] [client 206.189.2.13:56190] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.vscode/sftp.json"] [unique_id "aSGUrW6cicFF3Aas-oSRFwAAAJI"]
[Sat Nov 22 18:47:10.927641 2025] [:error] [pid 44259:tid 44277] [client 206.189.2.13:56200] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about"] [unique_id "aSGUrnXe1xL-_YOdRmRz9wAAAY8"]
[Sat Nov 22 18:47:11.809617 2025] [:error] [pid 53566:tid 53581] [client 206.189.2.13:56206] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/debug/default/view"] [unique_id "aSGUr8bSHDBkRbwMbd4qAAAAAM0"]
[Sat Nov 22 18:47:12.893314 2025] [:error] [pid 53477:tid 53491] [client 206.189.2.13:56208] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/v2/_catalog"] [unique_id "aSGUsH7Lu30Ku9O40aK7CQAAAAo"]
[Sat Nov 22 18:47:13.683435 2025] [:error] [pid 44259:tid 44284] [client 206.189.2.13:56224] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSGUsXXe1xL-_YOdRmRz_gAAAZY"]
[Sat Nov 22 18:47:14.593773 2025] [:error] [pid 44259:tid 44267] [client 206.189.2.13:56238] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/server-status"] [unique_id "aSGUsnXe1xL-_YOdRmR0AgAAAYU"]
[Sat Nov 22 18:47:15.328437 2025] [:error] [pid 53479:tid 53548] [client 206.189.2.13:56246] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/login.action"] [unique_id "aSGUs26cicFF3Aas-oSRJwAAAIw"]
[Sat Nov 22 18:47:16.182180 2025] [:error] [pid 53477:tid 53498] [client 206.189.2.13:53472] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/_all_dbs"] [unique_id "aSGUtH7Lu30Ku9O40aK7DwAAABE"]
[Sat Nov 22 18:47:16.902947 2025] [:error] [pid 53478:tid 53527] [client 206.189.2.13:53478] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.DS_Store"] [unique_id "aSGUtAhUYdXBbQswAdT4hAAAAFI"]
[Sat Nov 22 18:47:17.633640 2025] [:error] [pid 25856:tid 25862] [client 206.189.2.13:53484] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.env"] [unique_id "aSGUtRsTP0wy94zKUvG6zgAAAQQ"]
[Sat Nov 22 18:47:18.433811 2025] [:error] [pid 44259:tid 44279] [client 206.189.2.13:53486] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aSGUtnXe1xL-_YOdRmR0EAAAAZE"]
[Sat Nov 22 18:47:19.154195 2025] [:error] [pid 53477:tid 53503] [client 206.189.2.13:53500] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSGUt37Lu30Ku9O40aK7EwAAABY"]
[Sat Nov 22 18:47:19.879812 2025] [:error] [pid 53477:tid 53483] [client 206.189.2.13:53512] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/config.json"] [unique_id "aSGUt37Lu30Ku9O40aK7FAAAAAI"]
[Sat Nov 22 18:47:20.721790 2025] [:error] [pid 53479:tid 53549] [client 206.189.2.13:53516] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/telescope/requests"] [unique_id "aSGUuG6cicFF3Aas-oSROwAAAI0"]
[Sat Nov 22 18:47:21.439679 2025] [:error] [pid 9547:tid 9567] [client 206.189.2.13:53532] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/info.php"] [unique_id "aSGUudClOR5qk7DoMeG0vAAAAU4"]
[Sat Nov 22 18:47:22.157610 2025] [:error] [pid 44259:tid 44286] [client 206.189.2.13:53540] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSGUunXe1xL-_YOdRmR0GwAAAZg"]
[Sat Nov 22 20:07:31.172450 2025] [:error] [pid 44259:tid 44280] [client 45.128.199.237:32059] [client 45.128.199.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSGng3Xe1xL-_YOdRmSePQAAAZI"]
[Sat Nov 22 20:07:35.127910 2025] [:error] [pid 25856:tid 25872] [client 45.128.199.165:46273] [client 45.128.199.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/bk/index.php"] [unique_id "aSGnhxsTP0wy94zKUvHWrwAAAQ4"]
[Sat Nov 22 20:07:51.697782 2025] [:error] [pid 44259:tid 44280] [client 45.128.199.160:37393] [client 45.128.199.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSGnl3Xe1xL-_YOdRmSeYgAAAZI"]
[Sat Nov 22 20:07:57.939606 2025] [:error] [pid 53566:tid 53571] [client 45.128.199.151:30823] [client 45.128.199.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSGnncbSHDBkRbwMbd5FswAAAMM"]
[Sat Nov 22 20:07:59.325647 2025] [:error] [pid 53566:tid 53569] [client 45.128.199.158:55721] [client 45.128.199.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSGnn8bSHDBkRbwMbd5FtAAAAME"]
[Sat Nov 22 20:08:00.294829 2025] [:error] [pid 9547:tid 9577] [client 45.128.199.171:38595] [client 45.128.199.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSGnoNClOR5qk7DoMeHXWAAAAVg"]
[Sat Nov 22 20:08:07.348848 2025] [:error] [pid 9547:tid 9577] [client 45.128.199.162:33633] [client 45.128.199.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSGnp9ClOR5qk7DoMeHXZwAAAVg"]
[Sat Nov 22 20:08:11.575667 2025] [:error] [pid 53477:tid 53505] [client 45.128.199.160:54151] [client 45.128.199.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSGnq37Lu30Ku9O40aLU1wAAABg"]
[Sat Nov 22 20:08:29.863231 2025] [:error] [pid 53478:tid 53530] [client 45.128.199.150:61533] [client 45.128.199.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSGnvQhUYdXBbQswAdQQzwAAAFU"]
[Sat Nov 22 20:08:30.941439 2025] [:error] [pid 53566:tid 53589] [client 45.128.199.152:32857] [client 45.128.199.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSGnvsbSHDBkRbwMbd5F1AAAANU"]
[Sat Nov 22 20:10:33.342564 2025] [:error] [pid 25856:tid 25882] [client 45.128.199.168:58299] [client 45.128.199.168] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.168, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSGoORsTP0wy94zKUvHXVQAAARg"]
[Sat Nov 22 20:10:42.986063 2025] [:error] [pid 25856:tid 25874] [client 45.128.199.168:58299] [client 45.128.199.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/modules.php"] [unique_id "aSGoQhsTP0wy94zKUvHXZAAAARA"]
[Sat Nov 22 20:11:18.770768 2025] [:error] [pid 44259:tid 44284] [client 45.128.199.156:58227] [client 45.128.199.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSGoZnXe1xL-_YOdRmSfwQAAAZY"]
[Sat Nov 22 20:12:55.041697 2025] [:error] [pid 44259:tid 44277] [client 45.128.199.144:27663] [client 45.128.199.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/lx.php"] [unique_id "aSGox3Xe1xL-_YOdRmSgdwAAAY8"]
[Sat Nov 22 20:15:47.439849 2025] [:error] [pid 53478:tid 53510] [client 45.8.17.175:48747] [client 45.8.17.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSGpcwhUYdXBbQswAdQTCwAAAEE"]
[Sat Nov 22 20:17:09.093338 2025] [:error] [pid 9547:tid 9576] [client 45.128.199.153:36107] [client 45.128.199.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSGpxdClOR5qk7DoMeHa-AAAAVc"]
[Sat Nov 22 20:17:10.235752 2025] [:error] [pid 53479:tid 53554] [client 45.128.199.219:40125] [client 45.128.199.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.128.199.219, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSGpxm6cicFF3Aas-oSxkQAAAJI"]
[Sat Nov 22 20:17:20.191481 2025] [:error] [pid 53479:tid 53544] [client 45.128.199.219:40125] [client 45.128.199.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSGp0G6cicFF3Aas-oSxrwAAAIg"]
[Sat Nov 22 20:17:45.216737 2025] [:error] [pid 9547:tid 9557] [client 45.128.199.209:55077] [client 45.128.199.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSGp6dClOR5qk7DoMeHbZQAAAUQ"]
[Sat Nov 22 20:18:34.063785 2025] [:error] [pid 9547:tid 9577] [client 45.128.199.165:47601] [client 45.128.199.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/index.php"] [unique_id "aSGqGtClOR5qk7DoMeHcMAAAAVg"]
[Sat Nov 22 20:18:36.241180 2025] [:error] [pid 53477:tid 53491] [client 45.128.199.155:21993] [client 45.128.199.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSGqHH7Lu30Ku9O40aLY7wAAAAo"]
[Sat Nov 22 20:18:37.168118 2025] [:error] [pid 53479:tid 53557] [client 45.128.199.219:35393] [client 45.128.199.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/about.php"] [unique_id "aSGqHW6cicFF3Aas-oSyhAAAAJU"]
[Sat Nov 22 20:18:38.157581 2025] [:error] [pid 53566:tid 53571] [client 45.8.17.192:52943] [client 45.8.17.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/about.php"] [unique_id "aSGqHsbSHDBkRbwMbd5I1AAAAMM"]
[Sat Nov 22 20:18:46.607456 2025] [:error] [pid 53478:tid 53528] [client 45.128.199.167:36133] [client 45.128.199.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.167, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSGqJghUYdXBbQswAdQUWAAAAFM"]
[Sat Nov 22 20:19:23.418192 2025] [:error] [pid 53478:tid 53533] [client 45.128.199.167:36133] [client 45.128.199.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSGqSwhUYdXBbQswAdQUnwAAAFg"]
[Sat Nov 22 20:19:34.596488 2025] [:error] [pid 53479:tid 53549] [client 45.128.199.205:23607] [client 45.128.199.205] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.205, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSGqVm6cicFF3Aas-oSy8wAAAI0"]
[Sat Nov 22 20:19:54.314865 2025] [:error] [pid 53479:tid 53543] [client 45.128.199.205:23607] [client 45.128.199.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSGqam6cicFF3Aas-oSzKQAAAIc"]
[Sat Nov 22 20:19:55.582188 2025] [:error] [pid 53478:tid 53533] [client 45.128.199.152:28497] [client 45.128.199.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/about.php"] [unique_id "aSGqawhUYdXBbQswAdQU5wAAAFg"]
[Sat Nov 22 20:20:10.848960 2025] [proxy_fcgi:error] [pid 44259:tid 44275] [client 45.128.199.227:25283] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:30.052515 2025] [proxy_fcgi:error] [pid 44259:tid 44283] [client 45.128.199.227:25283] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:20:59.031619 2025] [:error] [pid 44259:tid 44262] [client 45.128.199.227:25283] [client 45.128.199.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSGqq3Xe1xL-_YOdRmSmiwAAAYA"]
[Sat Nov 22 20:21:10.628736 2025] [:error] [pid 53479:tid 53554] [client 45.128.199.204:30835] [client 45.128.199.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/bak.php"] [unique_id "aSGqtm6cicFF3Aas-oSznwAAAJI"]
[Sat Nov 22 20:21:14.549993 2025] [:error] [pid 44259:tid 44262] [client 45.128.199.164:57085] [client 45.128.199.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSGqunXe1xL-_YOdRmSm3gAAAYA"]
[Sat Nov 22 20:21:27.903800 2025] [:error] [pid 44259:tid 44269] [client 45.128.199.169:51727] [client 45.128.199.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "wendybinks.com"] [uri "/fm.php"] [unique_id "aSGqx3Xe1xL-_YOdRmSnSwAAAYc"]
[Sat Nov 22 20:21:28.837325 2025] [:error] [pid 53479:tid 53541] [client 45.128.199.159:42105] [client 45.128.199.159] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/index.php"] [unique_id "aSGqyG6cicFF3Aas-oSz3gAAAIU"]
[Sat Nov 22 20:21:29.894979 2025] [:error] [pid 9547:tid 9556] [client 45.128.199.170:27079] [client 45.128.199.170] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.170, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSGqydClOR5qk7DoMeHd-wAAAUM"]
[Sat Nov 22 20:21:38.071900 2025] [:error] [pid 9547:tid 9561] [client 45.128.199.170:27079] [client 45.128.199.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/themes.php"] [unique_id "aSGq0tClOR5qk7DoMeHeEgAAAUg"]
[Sat Nov 22 20:21:52.007377 2025] [autoindex:error] [pid 53478:tid 53530] [client 45.128.199.171:61895] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:21:54.406308 2025] [:error] [pid 53478:tid 53529] [client 45.128.199.171:61895] [client 45.128.199.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSGq4ghUYdXBbQswAdQV6wAAAFQ"]
[Sat Nov 22 20:22:01.304264 2025] [:error] [pid 25856:tid 25870] [client 45.128.199.198:65057] [client 45.128.199.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/about.php"] [unique_id "aSGq6RsTP0wy94zKUvHbwwAAAQw"]
[Sat Nov 22 20:22:13.841749 2025] [:error] [pid 44259:tid 44267] [client 45.128.199.70:29833] [client 45.128.199.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSGq9XXe1xL-_YOdRmSoHgAAAYU"]
[Sat Nov 22 20:22:22.122154 2025] [:error] [pid 53566:tid 53586] [client 45.128.199.244:32025] [client 45.128.199.244] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.244, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSGq_sbSHDBkRbwMbd5K2QAAANI"]
[Sat Nov 22 20:22:29.956500 2025] [:error] [pid 53566:tid 53586] [client 45.128.199.244:32025] [client 45.128.199.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSGrBcbSHDBkRbwMbd5K6wAAANI"]
[Sat Nov 22 20:22:31.755910 2025] [:error] [pid 53479:tid 53539] [client 45.128.199.162:23177] [client 45.128.199.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSGrB26cicFF3Aas-oS0SgAAAIM"]
[Sat Nov 22 20:22:59.963849 2025] [:error] [pid 9547:tid 9577] [client 45.128.199.198:35901] [client 45.128.199.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSGrI9ClOR5qk7DoMeHesgAAAVg"]
[Sat Nov 22 20:23:12.535779 2025] [:error] [pid 53478:tid 53527] [client 45.128.199.156:22757] [client 45.128.199.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/assets/about.php"] [unique_id "aSGrMAhUYdXBbQswAdQWfwAAAFI"]
[Sat Nov 22 20:23:13.753448 2025] [:error] [pid 9547:tid 9570] [client 45.128.199.173:63149] [client 45.128.199.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSGrMdClOR5qk7DoMeHexwAAAVE"]
[Sat Nov 22 20:23:14.741892 2025] [:error] [pid 9547:tid 9563] [client 45.128.199.156:24299] [client 45.128.199.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSGrMtClOR5qk7DoMeHeyAAAAUo"]
[Sat Nov 22 20:23:15.701539 2025] [:error] [pid 9547:tid 9567] [client 45.128.199.169:59531] [client 45.128.199.169] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSGrM9ClOR5qk7DoMeHeywAAAU4"]
[Sat Nov 22 20:23:26.510449 2025] [:error] [pid 9547:tid 9559] [client 45.128.199.150:44987] [client 45.128.199.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSGrPtClOR5qk7DoMeHe3gAAAUY"]
[Sat Nov 22 20:23:39.407111 2025] [:error] [pid 25856:tid 25865] [client 45.128.199.144:38607] [client 45.128.199.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSGrSxsTP0wy94zKUvHckgAAAQc"]
[Sat Nov 22 20:23:45.303510 2025] [:error] [pid 9547:tid 9576] [client 45.128.199.173:24503] [client 45.128.199.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSGrUdClOR5qk7DoMeHe9QAAAVc"]
[Sat Nov 22 20:23:49.688750 2025] [:error] [pid 44259:tid 44269] [client 45.128.199.161:29669] [client 45.128.199.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSGrVXXe1xL-_YOdRmSpvAAAAYc"]
[Sat Nov 22 20:23:58.915863 2025] [:error] [pid 53479:tid 53546] [client 45.128.199.166:47385] [client 45.128.199.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSGrXm6cicFF3Aas-oS1RgAAAIo"]
[Sat Nov 22 20:23:59.841852 2025] [:error] [pid 9547:tid 9553] [client 45.128.199.150:33703] [client 45.128.199.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSGrX9ClOR5qk7DoMeHfEQAAAUA"]
[Sat Nov 22 20:24:02.858115 2025] [:error] [pid 44259:tid 44273] [client 45.128.199.162:20631] [client 45.128.199.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSGrYnXe1xL-_YOdRmSp4QAAAYs"]
[Sat Nov 22 20:24:11.834846 2025] [:error] [pid 44259:tid 44277] [client 45.128.199.166:31795] [client 45.128.199.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.166, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSGra3Xe1xL-_YOdRmSp_AAAAY8"]
[Sat Nov 22 20:24:16.705007 2025] [:error] [pid 44259:tid 44283] [client 45.128.199.166:31795] [client 45.128.199.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSGrcHXe1xL-_YOdRmSqCgAAAZU"]
[Sat Nov 22 20:24:17.898145 2025] [:error] [pid 53478:tid 53511] [client 45.128.199.161:51171] [client 45.128.199.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSGrcQhUYdXBbQswAdQWzQAAAEI"]
[Sat Nov 22 20:24:41.353776 2025] [:error] [pid 25856:tid 25859] [client 45.128.199.161:54689] [client 45.128.199.161] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.161, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aSGriRsTP0wy94zKUvHdBQAAAQE"]
[Sat Nov 22 20:24:44.078220 2025] [:error] [pid 25856:tid 25858] [client 45.128.199.161:54689] [client 45.128.199.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSGrjBsTP0wy94zKUvHdDQAAAQA"]
[Sat Nov 22 20:24:45.082800 2025] [:error] [pid 9547:tid 9564] [client 45.128.199.70:31507] [client 45.128.199.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/network.php"] [unique_id "aSGrjdClOR5qk7DoMeHflgAAAUs"]
[Sat Nov 22 20:24:46.045988 2025] [:error] [pid 53477:tid 53491] [client 45.128.199.155:20819] [client 45.128.199.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/index.php"] [unique_id "aSGrjn7Lu30Ku9O40aLciAAAAAo"]
[Sat Nov 22 20:24:56.711674 2025] [:error] [pid 44259:tid 44285] [client 45.128.199.150:56371] [client 45.128.199.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/php-compat/autoload_classmap.php"] [unique_id "aSGrmHXe1xL-_YOdRmSq1AAAAZc"]
[Sat Nov 22 20:25:23.261159 2025] [:error] [pid 53566:tid 53571] [client 45.128.199.150:57939] [client 45.128.199.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSGrs8bSHDBkRbwMbd5MSgAAAMM"]
[Sat Nov 22 20:25:32.652042 2025] [:error] [pid 53478:tid 53515] [client 45.128.199.163:51021] [client 45.128.199.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSGrvAhUYdXBbQswAdQXfAAAAEY"]
[Sat Nov 22 20:25:43.298773 2025] [:error] [pid 53479:tid 53554] [client 45.128.199.162:59243] [client 45.128.199.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSGrx26cicFF3Aas-oS2MQAAAJI"]
[Sat Nov 22 20:25:47.965958 2025] [:error] [pid 25856:tid 25864] [client 45.128.199.166:42637] [client 45.128.199.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSGryxsTP0wy94zKUvHdhgAAAQY"]
[Sat Nov 22 20:25:51.845045 2025] [:error] [pid 53566:tid 53580] [client 45.128.199.198:25111] [client 45.128.199.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/index.php"] [unique_id "aSGrz8bSHDBkRbwMbd5MoAAAAMw"]
[Sat Nov 22 20:25:57.820523 2025] [:error] [pid 9547:tid 9570] [client 45.128.199.165:30447] [client 45.128.199.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSGr1dClOR5qk7DoMeHgAAAAAVE"]
[Sat Nov 22 20:26:01.399312 2025] [:error] [pid 53477:tid 53503] [client 45.128.199.171:54249] [client 45.128.199.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSGr2X7Lu30Ku9O40aLdegAAABY"]
[Sat Nov 22 20:26:11.577375 2025] [:error] [pid 53477:tid 53498] [client 45.128.199.237:47431] [client 45.128.199.237] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSGr437Lu30Ku9O40aLdlgAAABE"]
[Sat Nov 22 20:26:23.073821 2025] [:error] [pid 44259:tid 44266] [client 45.128.199.162:46901] [client 45.128.199.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSGr73Xe1xL-_YOdRmSsCgAAAYQ"]
[Sat Nov 22 20:26:32.511403 2025] [:error] [pid 53478:tid 53532] [client 45.128.199.185:34585] [client 45.128.199.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSGr-AhUYdXBbQswAdQYCgAAAFc"]
[Sat Nov 22 20:26:47.394932 2025] [:error] [pid 9547:tid 9576] [client 45.128.199.151:41345] [client 45.128.199.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSGsB9ClOR5qk7DoMeHgYgAAAVc"]
[Sat Nov 22 20:26:54.274827 2025] [proxy_fcgi:error] [pid 25856:tid 25863] [client 45.128.199.244:28367] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:27:04.807889 2025] [:error] [pid 25856:tid 25876] [client 45.128.199.244:28367] [client 45.128.199.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSGsGBsTP0wy94zKUvHeWAAAARI"]
[Sat Nov 22 20:27:54.347168 2025] [:error] [pid 44259:tid 44262] [client 45.128.199.168:44489] [client 45.128.199.168] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSGsSnXe1xL-_YOdRmStFwAAAYA"]
[Sat Nov 22 20:27:56.302349 2025] [:error] [pid 53478:tid 53513] [client 45.128.199.156:40291] [client 45.128.199.156] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSGsTAhUYdXBbQswAdQYtAAAAEQ"]
[Sat Nov 22 20:28:08.723864 2025] [:error] [pid 44259:tid 44270] [client 45.128.199.144:56535] [client 45.128.199.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/html-api/index.php"] [unique_id "aSGsWHXe1xL-_YOdRmStSwAAAYg"]
[Sat Nov 22 20:28:09.713819 2025] [:error] [pid 53566:tid 53583] [client 45.128.199.205:50161] [client 45.128.199.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSGsWcbSHDBkRbwMbd5N-gAAAM8"]
[Sat Nov 22 20:28:12.885781 2025] [:error] [pid 53478:tid 53518] [client 45.128.199.167:43507] [client 45.128.199.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aSGsXAhUYdXBbQswAdQY4QAAAEk"]
[Sat Nov 22 20:28:27.921349 2025] [:error] [pid 53477:tid 53485] [client 45.128.199.143:24877] [client 45.128.199.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSGsa37Lu30Ku9O40aLeUAAAAAQ"]
[Sat Nov 22 20:28:31.655720 2025] [:error] [pid 44259:tid 44273] [client 45.128.199.155:29919] [client 45.128.199.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.155, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-admin/wp-login.php"] [unique_id "aSGsb3Xe1xL-_YOdRmStaQAAAYs"]
[Sat Nov 22 20:28:36.641505 2025] [:error] [pid 44259:tid 44271] [client 45.128.199.155:29919] [client 45.128.199.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSGsdHXe1xL-_YOdRmStcAAAAYk"]
[Sat Nov 22 20:28:37.654132 2025] [:error] [pid 9547:tid 9574] [client 45.128.199.153:53959] [client 45.128.199.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/index.php"] [unique_id "aSGsddClOR5qk7DoMeHhSwAAAVU"]
[Sat Nov 22 20:28:46.603703 2025] [:error] [pid 53477:tid 53488] [client 45.128.199.167:42213] [client 45.128.199.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/autoload_classmap.php"] [unique_id "aSGsfn7Lu30Ku9O40aLeYwAAAAc"]
[Sat Nov 22 20:28:50.268948 2025] [:error] [pid 53477:tid 53489] [client 45.128.199.170:29149] [client 45.128.199.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/rk2.php"] [unique_id "aSGsgn7Lu30Ku9O40aLeaAAAAAg"]
[Sat Nov 22 20:28:59.283908 2025] [proxy_fcgi:error] [pid 44259:tid 44286] [client 45.128.199.227:21863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:29:14.107821 2025] [proxy_fcgi:error] [pid 44259:tid 44265] [client 45.128.199.227:21863] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:29:17.290708 2025] [:error] [pid 44259:tid 44267] [client 45.128.199.227:21863] [client 45.128.199.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/plugin.php"] [unique_id "aSGsnXXe1xL-_YOdRmSttgAAAYU"]
[Sat Nov 22 20:29:25.445638 2025] [:error] [pid 53566:tid 53589] [client 45.128.199.153:38895] [client 45.128.199.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/wp-tinymce.php"] [unique_id "aSGspcbSHDBkRbwMbd5OwQAAANU"]
[Sat Nov 22 20:29:35.520812 2025] [:error] [pid 9547:tid 9554] [client 45.128.199.166:44023] [client 45.128.199.166] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.166, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSGsr9ClOR5qk7DoMeHh1wAAAUE"]
[Sat Nov 22 20:29:35.525360 2025] [proxy_fcgi:error] [pid 9547:tid 9554] [client 45.128.199.166:44023] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:29:46.250698 2025] [:error] [pid 9547:tid 9560] [client 45.128.199.166:44023] [client 45.128.199.166] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/mah.php"] [unique_id "aSGsutClOR5qk7DoMeHh8gAAAUc"]
[Sat Nov 22 20:29:47.219096 2025] [:error] [pid 53566:tid 53591] [client 45.128.199.248:26995] [client 45.128.199.248] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.248, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/sunrise/wp-login.php"] [unique_id "aSGsu8bSHDBkRbwMbd5O4gAAANc"]
[Sat Nov 22 20:29:49.990402 2025] [:error] [pid 53566:tid 53589] [client 45.128.199.248:26995] [client 45.128.199.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/lmfi.php"] [unique_id "aSGsvcbSHDBkRbwMbd5O6AAAANU"]
[Sat Nov 22 20:30:18.511949 2025] [proxy_fcgi:error] [pid 53477:tid 53492] [client 45.128.199.167:58141] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:30:26.420435 2025] [:error] [pid 53477:tid 53493] [client 45.128.199.167:58141] [client 45.128.199.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSGs4n7Lu30Ku9O40aLe5gAAAAw"]
[Sat Nov 22 20:30:35.218657 2025] [:error] [pid 9547:tid 9571] [client 45.128.199.165:25581] [client 45.128.199.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/about.php"] [unique_id "aSGs69ClOR5qk7DoMeHingAAAVI"]
[Sat Nov 22 20:30:42.205536 2025] [:error] [pid 53478:tid 53509] [client 45.128.199.151:39963] [client 45.128.199.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.151, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSGs8ghUYdXBbQswAdQZ1wAAAEA"]
[Sat Nov 22 20:31:06.778371 2025] [:error] [pid 53478:tid 53527] [client 45.128.199.151:39963] [client 45.128.199.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aSGtCghUYdXBbQswAdQaBgAAAFI"]
[Sat Nov 22 20:31:13.251152 2025] [:error] [pid 9547:tid 9574] [client 45.128.199.154:31291] [client 45.128.199.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/packed.php"] [unique_id "aSGtEdClOR5qk7DoMeHjWAAAAVU"]
[Sat Nov 22 20:31:37.007236 2025] [:error] [pid 9547:tid 9570] [client 45.128.199.143:37151] [client 45.128.199.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/file.php"] [unique_id "aSGtKdClOR5qk7DoMeHjdAAAAVE"]
[Sat Nov 22 20:31:41.352958 2025] [:error] [pid 53566:tid 53584] [client 45.128.199.174:37803] [client 45.128.199.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSGtLcbSHDBkRbwMbd5PwAAAANA"]
[Sat Nov 22 20:31:45.148677 2025] [:error] [pid 25856:tid 25877] [client 45.128.199.172:20715] [client 45.128.199.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "aSGtMRsTP0wy94zKUvHgMQAAARM"]
[Sat Nov 22 20:32:00.523321 2025] [:error] [pid 25856:tid 25860] [client 45.128.199.171:46845] [client 45.128.199.171] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.171, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aSGtQBsTP0wy94zKUvHgQAAAAQI"]
[Sat Nov 22 20:32:13.242967 2025] [:error] [pid 53478:tid 53519] [client 45.128.199.242:56709] [client 45.128.199.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSGtTQhUYdXBbQswAdQabAAAAEo"]
[Sat Nov 22 20:32:32.633415 2025] [:error] [pid 53566:tid 53569] [client 45.128.199.163:29959] [client 45.128.199.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSGtYMbSHDBkRbwMbd5QGAAAAME"]
[Sat Nov 22 20:32:34.656447 2025] [:error] [pid 25856:tid 25881] [client 45.128.199.242:27583] [client 45.128.199.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSGtYhsTP0wy94zKUvHgXwAAARc"]
[Sat Nov 22 20:32:45.253206 2025] [proxy_fcgi:error] [pid 53477:tid 53503] [client 45.128.199.173:46857] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:32:50.427665 2025] [proxy_fcgi:error] [pid 53477:tid 53505] [client 45.128.199.173:46857] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:32:50.836345 2025] [:error] [pid 53477:tid 53481] [client 45.128.199.173:46857] [client 45.128.199.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/function.php"] [unique_id "aSGtcn7Lu30Ku9O40aLftAAAAAA"]
[Sat Nov 22 20:32:59.968014 2025] [:error] [pid 53477:tid 53503] [client 45.128.199.172:64705] [client 45.128.199.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/votes.php"] [unique_id "aSGte37Lu30Ku9O40aLfyQAAABY"]
[Sat Nov 22 20:33:19.340291 2025] [proxy_fcgi:error] [pid 44259:tid 44282] [client 45.128.199.147:24561] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:33:22.318799 2025] [:error] [pid 44259:tid 44274] [client 45.128.199.147:24561] [client 45.128.199.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/file.php"] [unique_id "aSGtknXe1xL-_YOdRmSwIgAAAYw"]
[Sat Nov 22 20:33:36.688418 2025] [:error] [pid 44259:tid 44286] [client 45.128.199.150:50611] [client 45.128.199.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/parx.php"] [unique_id "aSGtoHXe1xL-_YOdRmSwTgAAAZg"]
[Sat Nov 22 20:34:01.304842 2025] [proxy_fcgi:error] [pid 9547:tid 9562] [client 45.128.199.70:27927] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:34:02.652774 2025] [:error] [pid 9547:tid 9567] [client 45.128.199.70:27927] [client 45.128.199.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/components/about.php"] [unique_id "aSGtutClOR5qk7DoMeHkeQAAAU4"]
[Sat Nov 22 20:34:03.767113 2025] [proxy_fcgi:error] [pid 9547:tid 9565] [client 45.128.199.155:51893] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:34:25.772799 2025] [proxy_fcgi:error] [pid 53479:tid 53542] [client 45.128.199.154:55899] AH01071: Got error 'PHP message: PHP Warning:  Use of undefined constant ABSPATH - assumed 'ABSPATH' (this will throw an Error in a future version of PHP) in /home/stunnedemuadmin/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/stunnedemuadmin/public_html/wp-settings.php on line 34PHP message: PHP Warning:  require(ABSPATHwp-includes/version.php): failed to open stream: No such file or directory in /home/stunnedemuadmin/public_html/wp-settings.php on line 34PHP message: PHP Fatal error:  require(): Failed opening required 'ABSPATHwp-includes/version.php' (include_path='.:') in /home/stunnedemuadmin/public_html/wp-settings.php on line 34'
[Sat Nov 22 20:34:27.980564 2025] [:error] [pid 9547:tid 9556] [client 45.128.199.248:53247] [client 45.128.199.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSGt09ClOR5qk7DoMeHkzwAAAUM"]
[Sat Nov 22 20:34:34.531735 2025] [proxy_fcgi:error] [pid 53566:tid 53581] [client 45.128.199.143:48411] AH01071: Got error 'PHP message: PHP Warning:  mysqli_query(): (HY000/2006): MySQL server has gone away in /home/stunnedemuadmin/public_html/wp-includes/class-wpdb.php on line 2351'
[Sat Nov 22 20:34:56.640887 2025] [:error] [pid 44259:tid 44280] [client 45.128.199.151:63195] [client 45.128.199.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/item.php"] [unique_id "aSGt8HXe1xL-_YOdRmSwzgAAAZI"]
[Sat Nov 22 20:35:22.048402 2025] [:error] [pid 53566:tid 53572] [client 45.128.199.155:24039] [client 45.128.199.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.155, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/.well-known/pki-validation/wp-login.php"] [unique_id "aSGuCsbSHDBkRbwMbd5RSQAAAMQ"]
[Sat Nov 22 20:35:26.815623 2025] [:error] [pid 53566:tid 53579] [client 45.128.199.155:24039] [client 45.128.199.155] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.155, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aSGuDsbSHDBkRbwMbd5RTAAAAMs"]
[Sat Nov 22 20:35:30.735119 2025] [:error] [pid 53566:tid 53578] [client 45.128.199.155:24039] [client 45.128.199.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/mani.php"] [unique_id "aSGuEsbSHDBkRbwMbd5RUAAAAMo"]
[Sat Nov 22 20:35:51.433127 2025] [:error] [pid 9547:tid 9575] [client 45.8.17.175:41615] [client 45.8.17.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/network.php"] [unique_id "aSGuJ9ClOR5qk7DoMeHlPQAAAVY"]
[Sat Nov 22 20:35:58.747931 2025] [:error] [pid 9547:tid 9576] [client 45.128.199.219:41785] [client 45.128.199.219] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/defaults.php"] [unique_id "aSGuLtClOR5qk7DoMeHlRgAAAVc"]
[Sat Nov 22 20:36:14.158294 2025] [proxy_fcgi:error] [pid 53566:tid 53570] [client 45.128.199.157:20139] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:36:18.990469 2025] [proxy_fcgi:error] [pid 53566:tid 53585] [client 45.128.199.157:20139] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:36:21.849880 2025] [:error] [pid 53566:tid 53575] [client 45.128.199.157:20139] [client 45.128.199.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSGuRcbSHDBkRbwMbd5RdAAAAMc"]
[Sat Nov 22 20:36:22.740503 2025] [:error] [pid 9547:tid 9555] [client 45.128.199.160:35045] [client 45.128.199.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/block-supports/about.php"] [unique_id "aSGuRtClOR5qk7DoMeHlXQAAAUI"]
[Sat Nov 22 20:36:33.308956 2025] [:error] [pid 53478:tid 53510] [client 45.128.199.167:60787] [client 45.128.199.167] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.167, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-content/wp-login.php"] [unique_id "aSGuUQhUYdXBbQswAdQbegAAAEE"]
[Sat Nov 22 20:36:43.529420 2025] [:error] [pid 53478:tid 53514] [client 45.128.199.167:60787] [client 45.128.199.167] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSGuWwhUYdXBbQswAdQbiwAAAEU"]
[Sat Nov 22 20:36:46.495853 2025] [:error] [pid 53477:tid 53497] [client 45.128.199.158:26645] [client 45.128.199.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/xBrain.php"] [unique_id "aSGuXn7Lu30Ku9O40aLg6QAAABA"]
[Sat Nov 22 20:36:47.680740 2025] [:error] [pid 53478:tid 53522] [client 45.128.199.163:62451] [client 45.128.199.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSGuXwhUYdXBbQswAdQbjwAAAE0"]
[Sat Nov 22 20:36:52.524121 2025] [:error] [pid 9547:tid 9576] [client 45.128.199.171:43431] [client 45.128.199.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSGuZNClOR5qk7DoMeHldAAAAVc"]
[Sat Nov 22 20:37:14.634330 2025] [proxy_fcgi:error] [pid 44259:tid 44266] [client 45.128.199.151:26313] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:37:17.177261 2025] [:error] [pid 44259:tid 44280] [client 45.128.199.151:26313] [client 45.128.199.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSGufXXe1xL-_YOdRmSxkwAAAZI"]
[Sat Nov 22 20:37:22.714309 2025] [proxy_fcgi:error] [pid 53477:tid 53496] [client 45.128.199.244:27873] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 20:38:02.476235 2025] [:error] [pid 9547:tid 9568] [client 45.128.199.170:51381] [client 45.128.199.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/radio.php"] [unique_id "aSGuqtClOR5qk7DoMeHlygAAAU8"]
[Sat Nov 22 20:38:41.290650 2025] [:error] [pid 9547:tid 9558] [client 45.128.199.244:32061] [client 45.128.199.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/sodium_compat/src/Core/Curve25519/Ge/wp_blog.php"] [unique_id "aSGu0dClOR5qk7DoMeHmQwAAAUU"]
[Sat Nov 22 20:38:57.203225 2025] [:error] [pid 25856:tid 25863] [client 45.128.199.185:35621] [client 45.128.199.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSGu4RsTP0wy94zKUvHiQQAAAQU"]
[Sat Nov 22 20:39:04.758051 2025] [:error] [pid 9547:tid 9561] [client 45.128.199.161:45691] [client 45.128.199.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/skins/lightgray/fonts/index.php"] [unique_id "aSGu6NClOR5qk7DoMeHmeAAAAUg"]
[Sat Nov 22 20:39:30.924021 2025] [:error] [pid 9547:tid 9570] [client 45.128.199.162:40703] [client 45.128.199.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/index.php"] [unique_id "aSGvAtClOR5qk7DoMeHmuAAAAVE"]
[Sat Nov 22 20:39:31.952422 2025] [:error] [pid 53478:tid 53529] [client 45.128.199.157:52113] [client 45.128.199.157] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSGvAwhUYdXBbQswAdQcTgAAAFQ"]
[Sat Nov 22 20:39:38.546938 2025] [:error] [pid 9547:tid 9571] [client 45.128.199.244:39393] [client 45.128.199.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/random_compat/about.php"] [unique_id "aSGvCtClOR5qk7DoMeHm0QAAAVI"]
[Sat Nov 22 20:40:24.238229 2025] [autoindex:error] [pid 53566:tid 53573] [client 45.128.199.187:36927] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:35.915238 2025] [autoindex:error] [pid 53566:tid 53588] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:39.034281 2025] [autoindex:error] [pid 53566:tid 53586] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:39.514409 2025] [autoindex:error] [pid 53566:tid 53592] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:39.998928 2025] [autoindex:error] [pid 53566:tid 53575] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:40.544207 2025] [autoindex:error] [pid 53566:tid 53589] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/ID3/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:41.014772 2025] [autoindex:error] [pid 53566:tid 53572] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Requests/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:42.009645 2025] [autoindex:error] [pid 53566:tid 53585] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/certificates/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:42.483438 2025] [autoindex:error] [pid 53566:tid 53569] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:42.962081 2025] [autoindex:error] [pid 53566:tid 53588] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/images/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:43.424780 2025] [autoindex:error] [pid 53566:tid 53586] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:40:52.393937 2025] [autoindex:error] [pid 53566:tid 53583] [client 45.128.199.187:36927] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2021/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:21.251394 2025] [autoindex:error] [pid 9547:tid 9557] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/ectoplasm/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:21.783010 2025] [autoindex:error] [pid 9547:tid 9559] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/light/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:22.363976 2025] [autoindex:error] [pid 9547:tid 9565] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/midnight/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:22.839842 2025] [autoindex:error] [pid 9547:tid 9554] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/modern/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:23.394523 2025] [autoindex:error] [pid 9547:tid 9555] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/ocean/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:23.991835 2025] [autoindex:error] [pid 9547:tid 9576] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/sunrise/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:24.446287 2025] [autoindex:error] [pid 9547:tid 9561] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:25.120356 2025] [autoindex:error] [pid 9547:tid 9553] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/languages/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:25.674161 2025] [autoindex:error] [pid 9547:tid 9575] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:26.219513 2025] [autoindex:error] [pid 9547:tid 9560] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2023/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:26.781447 2025] [autoindex:error] [pid 9547:tid 9554] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2024/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:29.840882 2025] [autoindex:error] [pid 9547:tid 9556] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:32.987847 2025] [autoindex:error] [pid 9547:tid 9562] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/crystal/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:33.463225 2025] [autoindex:error] [pid 9547:tid 9563] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/media/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:33.958533 2025] [autoindex:error] [pid 9547:tid 9571] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/images/smilies/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:37.465966 2025] [autoindex:error] [pid 9547:tid 9574] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/codemirror/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:38.338824 2025] [autoindex:error] [pid 9547:tid 9570] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/plupload/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:38.873361 2025] [autoindex:error] [pid 9547:tid 9556] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/PHPMailer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:40.180770 2025] [autoindex:error] [pid 9547:tid 9564] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:42:40.917628 2025] [autoindex:error] [pid 9547:tid 9560] [client 45.128.199.164:25139] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/providers/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:44:28.146468 2025] [autoindex:error] [pid 44259:tid 44277] [client 45.128.199.150:43055] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/plugins/fullscreen/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:44:56.266531 2025] [autoindex:error] [pid 44259:tid 44267] [client 45.128.199.150:43055] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/colors/blue/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:13.060563 2025] [autoindex:error] [pid 44259:tid 44282] [client 45.128.199.150:43055] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:14.028738 2025] [autoindex:error] [pid 44259:tid 44285] [client 45.128.199.150:43055] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:32.189980 2025] [autoindex:error] [pid 53477:tid 53497] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:33.288676 2025] [autoindex:error] [pid 53477:tid 53499] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/IXR/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:33.748358 2025] [autoindex:error] [pid 53477:tid 53502] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/SimplePie/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:35.007223 2025] [autoindex:error] [pid 53477:tid 53494] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:35.533685 2025] [autoindex:error] [pid 53477:tid 53486] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Renderer/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:36.032067 2025] [autoindex:error] [pid 53477:tid 53493] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/customize/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:36.582107 2025] [autoindex:error] [pid 53477:tid 53490] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/fonts/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:37.078184 2025] [autoindex:error] [pid 53477:tid 53483] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/pomo/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:37.543232 2025] [autoindex:error] [pid 53477:tid 53481] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:45:38.054078 2025] [autoindex:error] [pid 53477:tid 53492] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:46:03.115446 2025] [autoindex:error] [pid 53477:tid 53502] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/theme-compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:46:40.281879 2025] [autoindex:error] [pid 53477:tid 53504] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:46:40.725080 2025] [autoindex:error] [pid 53477:tid 53493] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/jcrop/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:47:25.644339 2025] [autoindex:error] [pid 53477:tid 53494] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/plugins/paste/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:47:33.155169 2025] [autoindex:error] [pid 53477:tid 53504] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-supports/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:47:46.145925 2025] [autoindex:error] [pid 53477:tid 53483] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:47:49.156181 2025] [autoindex:error] [pid 53477:tid 53505] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Text/Diff/Engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:47:55.696637 2025] [autoindex:error] [pid 53477:tid 53493] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/plugins/directionality/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:47:58.844026 2025] [autoindex:error] [pid 53477:tid 53482] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/rest-api/search/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:47:59.345214 2025] [autoindex:error] [pid 53477:tid 53491] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/plugins/compat3x/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:48:03.055233 2025] [autoindex:error] [pid 53477:tid 53499] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/block-patterns/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:48:08.036613 2025] [autoindex:error] [pid 53477:tid 53494] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/style-engine/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:48:11.462929 2025] [autoindex:error] [pid 53477:tid 53481] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/plugins/compat3x/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:48:26.312188 2025] [autoindex:error] [pid 53477:tid 53481] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/Requests/src/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:48:46.543945 2025] [autoindex:error] [pid 53477:tid 53490] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/blocks/paragraph/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:48:59.535689 2025] [autoindex:error] [pid 53477:tid 53496] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/dist/nux/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:49:02.972007 2025] [autoindex:error] [pid 53477:tid 53489] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/plugins/lists/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:49:03.508078 2025] [autoindex:error] [pid 53477:tid 53503] [client 45.128.199.173:45999] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/tinymce/skins/lightgray/img/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:50:25.893364 2025] [autoindex:error] [pid 25856:tid 25874] [client 45.128.199.144:58187] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sodium_compat/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:50:32.525586 2025] [autoindex:error] [pid 25856:tid 25861] [client 45.128.199.144:58187] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/blocks/social-links/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 20:51:15.368171 2025] [autoindex:error] [pid 25856:tid 25863] [client 45.128.199.144:58187] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sodium_compat/src/Core/Curve25519/Ge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 21:39:27.493547 2025] [:error] [pid 25856:tid 25878] [client 222.79.103.59:33034] [client 222.79.103.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aSG9DxsTP0wy94zKUvH1QQAAARQ"]
[Sat Nov 22 23:04:38.879236 2025] [:error] [pid 25856:tid 25882] [client 94.102.55.18:34378] [client 94.102.55.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wendybinks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wendybinks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSHRBhsTP0wy94zKUvEIgQAAARg"]
[Sat Nov 22 23:04:40.273611 2025] [:error] [pid 53477:tid 53486] [client 94.102.55.18:53264] [client 94.102.55.18] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wendybinks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wendybinks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSHRCH7Lu30Ku9O40aIF2AAAAAU"]
[Sat Nov 22 23:20:18.296995 2025] [:error] [pid 44259:tid 44274] [client 172.192.65.105:22359] [client 172.192.65.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/SimplePie/network.php"] [unique_id "aSHUsnXe1xL-_YOdRmT3fQAAAYw"]
[Sat Nov 22 23:20:18.525883 2025] [:error] [pid 53566:tid 53574] [client 172.192.65.105:22340] [client 172.192.65.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSHUssbSHDBkRbwMbd57ugAAAMY"]
[Sat Nov 22 23:20:24.614524 2025] [:error] [pid 9547:tid 9558] [client 172.192.65.105:22281] [client 172.192.65.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSHUuNClOR5qk7DoMeEbbgAAAUU"]
[Sat Nov 22 23:20:37.556895 2025] [:error] [pid 53566:tid 53579] [client 172.192.65.105:22286] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/db.php"] [unique_id "aSHUxcbSHDBkRbwMbd57zwAAAMs"]
[Sat Nov 22 23:20:37.804958 2025] [:error] [pid 53478:tid 53531] [client 172.192.65.105:22342] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/db.php"] [unique_id "aSHUxQhUYdXBbQswAdRDIAAAAFY"]
[Sat Nov 22 23:20:38.037323 2025] [:error] [pid 53566:tid 53569] [client 172.192.65.105:22346] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/db.php"] [unique_id "aSHUxsbSHDBkRbwMbd570QAAAME"]
[Sat Nov 22 23:20:38.265843 2025] [:error] [pid 53478:tid 53515] [client 172.192.65.105:22339] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/db.php"] [unique_id "aSHUxghUYdXBbQswAdRDIgAAAEY"]
[Sat Nov 22 23:20:38.579608 2025] [:error] [pid 53478:tid 53510] [client 172.192.65.105:22367] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/gecko.php"] [unique_id "aSHUxghUYdXBbQswAdRDIwAAAEE"]
[Sat Nov 22 23:20:38.870003 2025] [:error] [pid 53478:tid 53517] [client 172.192.65.105:22366] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/gecko.php"] [unique_id "aSHUxghUYdXBbQswAdRDJQAAAEg"]
[Sat Nov 22 23:20:39.101613 2025] [:error] [pid 9547:tid 9576] [client 172.192.65.105:22378] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/gecko.php"] [unique_id "aSHUx9ClOR5qk7DoMeEbjgAAAVc"]
[Sat Nov 22 23:20:39.328593 2025] [:error] [pid 44259:tid 44264] [client 172.192.65.105:22275] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/gecko.php"] [unique_id "aSHUx3Xe1xL-_YOdRmT3rAAAAYI"]
[Sat Nov 22 23:20:39.555881 2025] [:error] [pid 53566:tid 53591] [client 172.192.65.105:22382] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/abe.php"] [unique_id "aSHUx8bSHDBkRbwMbd570gAAANc"]
[Sat Nov 22 23:20:39.795539 2025] [:error] [pid 44259:tid 44278] [client 172.192.65.105:22377] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/abe.php"] [unique_id "aSHUx3Xe1xL-_YOdRmT3rgAAAZA"]
[Sat Nov 22 23:20:40.052379 2025] [:error] [pid 9547:tid 9569] [client 172.192.65.105:8131] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/abe.php"] [unique_id "aSHUyNClOR5qk7DoMeEbkAAAAVA"]
[Sat Nov 22 23:20:40.278351 2025] [:error] [pid 44259:tid 44274] [client 172.192.65.105:22328] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/abe.php"] [unique_id "aSHUyHXe1xL-_YOdRmT3rwAAAYw"]
[Sat Nov 22 23:20:40.506347 2025] [:error] [pid 9547:tid 9565] [client 172.192.65.105:22283] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bs1.php"] [unique_id "aSHUyNClOR5qk7DoMeEbkgAAAUw"]
[Sat Nov 22 23:20:40.739776 2025] [:error] [pid 53566:tid 53585] [client 172.192.65.105:22368] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bs1.php"] [unique_id "aSHUyMbSHDBkRbwMbd570wAAANE"]
[Sat Nov 22 23:20:40.969260 2025] [:error] [pid 9547:tid 9566] [client 172.192.65.105:22389] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bs1.php"] [unique_id "aSHUyNClOR5qk7DoMeEblAAAAU0"]
[Sat Nov 22 23:20:41.266430 2025] [:error] [pid 9547:tid 9561] [client 172.192.65.105:22391] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bs1.php"] [unique_id "aSHUydClOR5qk7DoMeEblQAAAUg"]
[Sat Nov 22 23:20:41.492223 2025] [:error] [pid 44259:tid 44263] [client 172.192.65.105:22349] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/content.php"] [unique_id "aSHUyXXe1xL-_YOdRmT3sQAAAYE"]
[Sat Nov 22 23:20:41.787920 2025] [:error] [pid 53566:tid 53576] [client 172.192.65.105:22355] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/content.php"] [unique_id "aSHUycbSHDBkRbwMbd571AAAAMg"]
[Sat Nov 22 23:20:42.089054 2025] [:error] [pid 25856:tid 25864] [client 172.192.65.105:22392] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/content.php"] [unique_id "aSHUyhsTP0wy94zKUvEOkgAAAQY"]
[Sat Nov 22 23:20:42.315772 2025] [:error] [pid 44259:tid 44270] [client 172.192.65.105:22376] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/content.php"] [unique_id "aSHUynXe1xL-_YOdRmT3swAAAYg"]
[Sat Nov 22 23:20:42.612251 2025] [:error] [pid 53566:tid 53588] [client 172.192.65.105:22350] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cc.php"] [unique_id "aSHUysbSHDBkRbwMbd571QAAANQ"]
[Sat Nov 22 23:20:42.851880 2025] [:error] [pid 53478:tid 53522] [client 172.192.65.105:22273] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cc.php"] [unique_id "aSHUyghUYdXBbQswAdRDJwAAAE0"]
[Sat Nov 22 23:20:43.174565 2025] [:error] [pid 44259:tid 44275] [client 172.192.65.105:22291] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cc.php"] [unique_id "aSHUy3Xe1xL-_YOdRmT3ugAAAY0"]
[Sat Nov 22 23:20:43.405058 2025] [:error] [pid 44259:tid 44265] [client 172.192.65.105:22276] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cc.php"] [unique_id "aSHUy3Xe1xL-_YOdRmT3vAAAAYM"]
[Sat Nov 22 23:20:43.631442 2025] [:error] [pid 53479:tid 53558] [client 172.192.65.105:22285] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-cron.php"] [unique_id "aSHUy26cicFF3Aas-oTquwAAAJY"]
[Sat Nov 22 23:20:43.872617 2025] [:error] [pid 53477:tid 53494] [client 172.192.65.105:22289] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-cron.php"] [unique_id "aSHUy37Lu30Ku9O40aIKQQAAAA0"]
[Sat Nov 22 23:20:44.116564 2025] [:error] [pid 9547:tid 9563] [client 172.192.65.105:22396] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-cron.php"] [unique_id "aSHUzNClOR5qk7DoMeEbqQAAAUo"]
[Sat Nov 22 23:20:44.342811 2025] [:error] [pid 53566:tid 53590] [client 172.192.65.105:22373] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-cron.php"] [unique_id "aSHUzMbSHDBkRbwMbd573AAAANY"]
[Sat Nov 22 23:20:44.571731 2025] [:error] [pid 53566:tid 53584] [client 172.192.65.105:8128] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css.php"] [unique_id "aSHUzMbSHDBkRbwMbd573gAAANA"]
[Sat Nov 22 23:20:44.799193 2025] [:error] [pid 9547:tid 9560] [client 172.192.65.105:22393] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css.php"] [unique_id "aSHUzNClOR5qk7DoMeEbsAAAAUc"]
[Sat Nov 22 23:20:45.039230 2025] [:error] [pid 9547:tid 9558] [client 172.192.65.105:22321] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css.php"] [unique_id "aSHUzdClOR5qk7DoMeEbsgAAAUU"]
[Sat Nov 22 23:20:45.266748 2025] [:error] [pid 44259:tid 44281] [client 172.192.65.105:22347] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/css.php"] [unique_id "aSHUzXXe1xL-_YOdRmT3xgAAAZM"]
[Sat Nov 22 23:20:45.494622 2025] [:error] [pid 44259:tid 44262] [client 172.192.65.105:8146] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cloud.php"] [unique_id "aSHUzXXe1xL-_YOdRmT3yAAAAYA"]
[Sat Nov 22 23:20:45.722089 2025] [:error] [pid 44259:tid 44271] [client 172.192.65.105:22364] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cloud.php"] [unique_id "aSHUzXXe1xL-_YOdRmT3ywAAAYk"]
[Sat Nov 22 23:20:45.961809 2025] [:error] [pid 53566:tid 53586] [client 172.192.65.105:22369] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cloud.php"] [unique_id "aSHUzcbSHDBkRbwMbd574QAAANI"]
[Sat Nov 22 23:20:46.235962 2025] [:error] [pid 53479:tid 53555] [client 172.192.65.105:22381] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cloud.php"] [unique_id "aSHUzm6cicFF3Aas-oTqvQAAAJM"]
[Sat Nov 22 23:20:46.465031 2025] [:error] [pid 44259:tid 44266] [client 172.192.65.105:22388] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bless.php"] [unique_id "aSHUznXe1xL-_YOdRmT3zAAAAYQ"]
[Sat Nov 22 23:20:46.691879 2025] [:error] [pid 53479:tid 53556] [client 172.192.65.105:22390] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bless.php"] [unique_id "aSHUzm6cicFF3Aas-oTqvgAAAJQ"]
[Sat Nov 22 23:20:46.964270 2025] [:error] [pid 53477:tid 53488] [client 172.192.65.105:22294] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bless.php"] [unique_id "aSHUzn7Lu30Ku9O40aIKSAAAAAc"]
[Sat Nov 22 23:20:47.202017 2025] [:error] [pid 53479:tid 53548] [client 172.192.65.105:22325] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bless.php"] [unique_id "aSHUz26cicFF3Aas-oTqvwAAAIw"]
[Sat Nov 22 23:20:47.428881 2025] [:error] [pid 53478:tid 53526] [client 172.192.65.105:22301] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/radio.php"] [unique_id "aSHUzwhUYdXBbQswAdRDMQAAAFE"]
[Sat Nov 22 23:20:47.664113 2025] [:error] [pid 53566:tid 53589] [client 172.192.65.105:22394] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/radio.php"] [unique_id "aSHUz8bSHDBkRbwMbd575QAAANU"]
[Sat Nov 22 23:20:47.890953 2025] [:error] [pid 53478:tid 53531] [client 172.192.65.105:22352] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/radio.php"] [unique_id "aSHUzwhUYdXBbQswAdRDMgAAAFY"]
[Sat Nov 22 23:20:48.121697 2025] [:error] [pid 9547:tid 9555] [client 172.192.65.105:22295] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/radio.php"] [unique_id "aSHU0NClOR5qk7DoMeEbtQAAAUI"]
[Sat Nov 22 23:20:48.353213 2025] [:error] [pid 53477:tid 53503] [client 172.192.65.105:22290] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cong.php"] [unique_id "aSHU0H7Lu30Ku9O40aIKTAAAABY"]
[Sat Nov 22 23:20:48.587631 2025] [:error] [pid 53479:tid 53553] [client 172.192.65.105:8140] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cong.php"] [unique_id "aSHU0G6cicFF3Aas-oTqwQAAAJE"]
[Sat Nov 22 23:20:48.853077 2025] [:error] [pid 53566:tid 53591] [client 172.192.65.105:22316] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cong.php"] [unique_id "aSHU0MbSHDBkRbwMbd575gAAANc"]
[Sat Nov 22 23:20:49.079369 2025] [:error] [pid 53479:tid 53557] [client 172.192.65.105:22299] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cong.php"] [unique_id "aSHU0W6cicFF3Aas-oTqwwAAAJU"]
[Sat Nov 22 23:20:49.326475 2025] [:error] [pid 44259:tid 44265] [client 172.192.65.105:22361] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bak.php"] [unique_id "aSHU0XXe1xL-_YOdRmT3zgAAAYM"]
[Sat Nov 22 23:20:49.599496 2025] [:error] [pid 44259:tid 44276] [client 172.192.65.105:22308] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bak.php"] [unique_id "aSHU0XXe1xL-_YOdRmT3zwAAAY4"]
[Sat Nov 22 23:20:49.826475 2025] [:error] [pid 25856:tid 25862] [client 172.192.65.105:22278] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bak.php"] [unique_id "aSHU0RsTP0wy94zKUvEOrgAAAQQ"]
[Sat Nov 22 23:20:50.087467 2025] [:error] [pid 53478:tid 53522] [client 172.192.65.105:22323] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/bak.php"] [unique_id "aSHU0ghUYdXBbQswAdRDNgAAAE0"]
[Sat Nov 22 23:20:50.315305 2025] [:error] [pid 53477:tid 53494] [client 172.192.65.105:22380] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-trackback.php"] [unique_id "aSHU0n7Lu30Ku9O40aIKUQAAAA0"]
[Sat Nov 22 23:20:50.550710 2025] [:error] [pid 44259:tid 44274] [client 172.192.65.105:22375] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-trackback.php"] [unique_id "aSHU0nXe1xL-_YOdRmT30QAAAYw"]
[Sat Nov 22 23:20:50.778460 2025] [:error] [pid 53566:tid 53580] [client 172.192.65.105:22371] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-trackback.php"] [unique_id "aSHU0sbSHDBkRbwMbd576AAAAMw"]
[Sat Nov 22 23:20:51.005437 2025] [:error] [pid 53479:tid 53545] [client 172.192.65.105:22279] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-trackback.php"] [unique_id "aSHU026cicFF3Aas-oTqxQAAAIk"]
[Sat Nov 22 23:20:51.303627 2025] [:error] [pid 53479:tid 53549] [client 172.192.65.105:22305] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/text.php"] [unique_id "aSHU026cicFF3Aas-oTqxgAAAI0"]
[Sat Nov 22 23:20:51.532171 2025] [:error] [pid 53478:tid 53512] [client 172.192.65.105:22337] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/text.php"] [unique_id "aSHU0whUYdXBbQswAdRDNwAAAEM"]
[Sat Nov 22 23:20:51.759930 2025] [:error] [pid 25856:tid 25867] [client 172.192.65.105:22311] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/text.php"] [unique_id "aSHU0xsTP0wy94zKUvEOswAAAQk"]
[Sat Nov 22 23:20:51.987719 2025] [:error] [pid 9547:tid 9559] [client 172.192.65.105:8182] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/text.php"] [unique_id "aSHU09ClOR5qk7DoMeEbuAAAAUY"]
[Sat Nov 22 23:20:52.215067 2025] [:error] [pid 53566:tid 53582] [client 172.192.65.105:22277] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/as.php"] [unique_id "aSHU1MbSHDBkRbwMbd577AAAAM4"]
[Sat Nov 22 23:20:52.441634 2025] [:error] [pid 44259:tid 44285] [client 172.192.65.105:8153] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/as.php"] [unique_id "aSHU1HXe1xL-_YOdRmT30wAAAZc"]
[Sat Nov 22 23:20:52.720245 2025] [:error] [pid 53478:tid 53521] [client 172.192.65.105:22333] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/as.php"] [unique_id "aSHU1AhUYdXBbQswAdRDOgAAAEw"]
[Sat Nov 22 23:20:53.007650 2025] [:error] [pid 53566:tid 53577] [client 172.192.65.105:22292] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/as.php"] [unique_id "aSHU1cbSHDBkRbwMbd577QAAAMk"]
[Sat Nov 22 23:20:53.236156 2025] [:error] [pid 9547:tid 9577] [client 172.192.65.105:8171] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/404.php"] [unique_id "aSHU1dClOR5qk7DoMeEbuwAAAVg"]
[Sat Nov 22 23:20:53.462801 2025] [:error] [pid 9547:tid 9558] [client 172.192.65.105:22343] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/404.php"] [unique_id "aSHU1dClOR5qk7DoMeEbvAAAAUU"]
[Sat Nov 22 23:20:53.690088 2025] [:error] [pid 25856:tid 25862] [client 172.192.65.105:8160] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/404.php"] [unique_id "aSHU1RsTP0wy94zKUvEOwwAAAQQ"]
[Sat Nov 22 23:20:53.984049 2025] [:error] [pid 25856:tid 25865] [client 172.192.65.105:22302] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/404.php"] [unique_id "aSHU1RsTP0wy94zKUvEOxwAAAQc"]
[Sat Nov 22 23:20:54.210612 2025] [:error] [pid 44259:tid 44270] [client 172.192.65.105:22287] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/link.php"] [unique_id "aSHU1nXe1xL-_YOdRmT32QAAAYg"]
[Sat Nov 22 23:20:54.488874 2025] [:error] [pid 44259:tid 44284] [client 172.192.65.105:22296] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/link.php"] [unique_id "aSHU1nXe1xL-_YOdRmT33QAAAZY"]
[Sat Nov 22 23:20:54.720002 2025] [:error] [pid 44259:tid 44267] [client 172.192.65.105:8177] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/link.php"] [unique_id "aSHU1nXe1xL-_YOdRmT33gAAAYU"]
[Sat Nov 22 23:20:54.946599 2025] [:error] [pid 44259:tid 44280] [client 172.192.65.105:22300] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/link.php"] [unique_id "aSHU1nXe1xL-_YOdRmT33wAAAZI"]
[Sat Nov 22 23:20:55.173285 2025] [:error] [pid 53478:tid 53513] [client 172.192.65.105:22395] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/makeasmtp.php"] [unique_id "aSHU1whUYdXBbQswAdRDRAAAAEQ"]
[Sat Nov 22 23:20:55.402023 2025] [:error] [pid 53566:tid 53579] [client 172.192.65.105:22330] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/makeasmtp.php"] [unique_id "aSHU18bSHDBkRbwMbd577gAAAMs"]
[Sat Nov 22 23:20:55.630852 2025] [:error] [pid 9547:tid 9553] [client 172.192.65.105:22353] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/makeasmtp.php"] [unique_id "aSHU19ClOR5qk7DoMeEbvwAAAUA"]
[Sat Nov 22 23:20:55.858220 2025] [:error] [pid 44259:tid 44278] [client 172.192.65.105:22304] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/makeasmtp.php"] [unique_id "aSHU13Xe1xL-_YOdRmT34QAAAZA"]
[Sat Nov 22 23:20:56.085569 2025] [:error] [pid 53479:tid 53544] [client 172.192.65.105:22303] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSHU2G6cicFF3Aas-oTq4gAAAIg"]
[Sat Nov 22 23:20:56.313386 2025] [:error] [pid 53477:tid 53500] [client 172.192.65.105:22398] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSHU2H7Lu30Ku9O40aIKXQAAABM"]
[Sat Nov 22 23:20:56.541375 2025] [:error] [pid 53479:tid 53554] [client 172.192.65.105:22310] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSHU2G6cicFF3Aas-oTq5AAAAJI"]
[Sat Nov 22 23:20:56.771543 2025] [:error] [pid 53479:tid 53547] [client 172.192.65.105:22386] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/plugins.php"] [unique_id "aSHU2G6cicFF3Aas-oTq5QAAAIs"]
[Sat Nov 22 23:20:56.999958 2025] [:error] [pid 53479:tid 53551] [client 172.192.65.105:22288] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/file.php"] [unique_id "aSHU2G6cicFF3Aas-oTq5gAAAI8"]
[Sat Nov 22 23:20:57.299486 2025] [:error] [pid 9547:tid 9561] [client 172.192.65.105:8143] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/file.php"] [unique_id "aSHU2dClOR5qk7DoMeEbxAAAAUg"]
[Sat Nov 22 23:20:57.562565 2025] [:error] [pid 53479:tid 53558] [client 172.192.65.105:22336] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/file.php"] [unique_id "aSHU2W6cicFF3Aas-oTq5wAAAJY"]
[Sat Nov 22 23:20:57.792250 2025] [:error] [pid 44259:tid 44285] [client 172.192.65.105:8129] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/file.php"] [unique_id "aSHU2XXe1xL-_YOdRmT35gAAAZc"]
[Sat Nov 22 23:20:58.018621 2025] [:error] [pid 44259:tid 44262] [client 172.192.65.105:22354] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/test.php"] [unique_id "aSHU2nXe1xL-_YOdRmT36AAAAYA"]
[Sat Nov 22 23:20:58.246940 2025] [:error] [pid 44259:tid 44271] [client 172.192.65.105:22293] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/test.php"] [unique_id "aSHU2nXe1xL-_YOdRmT36QAAAYk"]
[Sat Nov 22 23:20:58.520730 2025] [:error] [pid 44259:tid 44281] [client 172.192.65.105:22297] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/test.php"] [unique_id "aSHU2nXe1xL-_YOdRmT36gAAAZM"]
[Sat Nov 22 23:20:58.748928 2025] [:error] [pid 9547:tid 9556] [client 172.192.65.105:22282] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/test.php"] [unique_id "aSHU2tClOR5qk7DoMeEbxwAAAUM"]
[Sat Nov 22 23:20:58.988518 2025] [:error] [pid 53478:tid 53510] [client 172.192.65.105:8169] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/chosen.php"] [unique_id "aSHU2ghUYdXBbQswAdRDRgAAAEE"]
[Sat Nov 22 23:20:59.223383 2025] [:error] [pid 44259:tid 44266] [client 172.192.65.105:22360] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/chosen.php"] [unique_id "aSHU23Xe1xL-_YOdRmT36wAAAYQ"]
[Sat Nov 22 23:20:59.503479 2025] [:error] [pid 53477:tid 53502] [client 172.192.65.105:8173] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/chosen.php"] [unique_id "aSHU237Lu30Ku9O40aIKYgAAABU"]
[Sat Nov 22 23:20:59.733309 2025] [:error] [pid 53566:tid 53573] [client 172.192.65.105:22397] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/chosen.php"] [unique_id "aSHU28bSHDBkRbwMbd579wAAAMU"]
[Sat Nov 22 23:20:59.959839 2025] [:error] [pid 9547:tid 9553] [client 172.192.65.105:8186] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/files/css_compare.php"] [unique_id "aSHU29ClOR5qk7DoMeEbzAAAAUA"]
[Sat Nov 22 23:21:00.186666 2025] [:error] [pid 25856:tid 25874] [client 172.192.65.105:22309] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/files/css_compare.php"] [unique_id "aSHU3BsTP0wy94zKUvEO1AAAARA"]
[Sat Nov 22 23:21:00.417547 2025] [:error] [pid 44259:tid 44282] [client 172.192.65.105:22322] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/files/css_compare.php"] [unique_id "aSHU3HXe1xL-_YOdRmT37QAAAZQ"]
[Sat Nov 22 23:21:00.645086 2025] [:error] [pid 44259:tid 44284] [client 172.192.65.105:8067] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/files/css_compare.php"] [unique_id "aSHU3HXe1xL-_YOdRmT37gAAAZY"]
[Sat Nov 22 23:21:00.880540 2025] [:error] [pid 25856:tid 25873] [client 172.192.65.105:8141] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp.php"] [unique_id "aSHU3BsTP0wy94zKUvEO1QAAAQ8"]
[Sat Nov 22 23:21:01.110976 2025] [:error] [pid 53479:tid 53556] [client 172.192.65.105:8135] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp.php"] [unique_id "aSHU3W6cicFF3Aas-oTq6QAAAJQ"]
[Sat Nov 22 23:21:01.338471 2025] [:error] [pid 44259:tid 44275] [client 172.192.65.105:8185] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp.php"] [unique_id "aSHU3XXe1xL-_YOdRmT38QAAAY0"]
[Sat Nov 22 23:21:01.591403 2025] [:error] [pid 44259:tid 44278] [client 172.192.65.105:22298] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp.php"] [unique_id "aSHU3XXe1xL-_YOdRmT38gAAAZA"]
[Sat Nov 22 23:21:01.818655 2025] [:error] [pid 44259:tid 44265] [client 172.192.65.105:22306] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uana.php"] [unique_id "aSHU3XXe1xL-_YOdRmT39AAAAYM"]
[Sat Nov 22 23:21:02.045932 2025] [:error] [pid 53478:tid 53533] [client 172.192.65.105:8079] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uana.php"] [unique_id "aSHU3ghUYdXBbQswAdRDRwAAAFg"]
[Sat Nov 22 23:21:02.272919 2025] [:error] [pid 53477:tid 53505] [client 172.192.65.105:22284] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uana.php"] [unique_id "aSHU3n7Lu30Ku9O40aIKawAAABg"]
[Sat Nov 22 23:21:02.542879 2025] [:error] [pid 25856:tid 25871] [client 172.192.65.105:8144] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uana.php"] [unique_id "aSHU3hsTP0wy94zKUvEO3gAAAQ0"]
[Sat Nov 22 23:21:02.783883 2025] [:error] [pid 53478:tid 53512] [client 172.192.65.105:22379] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/duck.php"] [unique_id "aSHU3ghUYdXBbQswAdRDSQAAAEM"]
[Sat Nov 22 23:21:03.013031 2025] [:error] [pid 53479:tid 53538] [client 172.192.65.105:22280] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/duck.php"] [unique_id "aSHU326cicFF3Aas-oTq7wAAAII"]
[Sat Nov 22 23:21:03.240438 2025] [:error] [pid 53478:tid 53518] [client 172.192.65.105:8073] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/duck.php"] [unique_id "aSHU3whUYdXBbQswAdRDSgAAAEk"]
[Sat Nov 22 23:21:03.473021 2025] [:error] [pid 53479:tid 53559] [client 172.192.65.105:22301] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/duck.php"] [unique_id "aSHU326cicFF3Aas-oTq8gAAAJc"]
[Sat Nov 22 23:21:03.705509 2025] [:error] [pid 44259:tid 44273] [client 172.192.65.105:22319] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lock360.php"] [unique_id "aSHU33Xe1xL-_YOdRmT3-AAAAYs"]
[Sat Nov 22 23:21:03.933929 2025] [:error] [pid 53477:tid 53487] [client 172.192.65.105:22274] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lock360.php"] [unique_id "aSHU337Lu30Ku9O40aIKcAAAAAY"]
[Sat Nov 22 23:21:04.161734 2025] [:error] [pid 44259:tid 44262] [client 172.192.65.105:8162] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lock360.php"] [unique_id "aSHU4HXe1xL-_YOdRmT3-gAAAYA"]
[Sat Nov 22 23:21:04.387848 2025] [:error] [pid 9547:tid 9553] [client 172.192.65.105:8134] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lock360.php"] [unique_id "aSHU4NClOR5qk7DoMeEb3gAAAUA"]
[Sat Nov 22 23:21:04.614708 2025] [:error] [pid 44259:tid 44281] [client 172.192.65.105:8137] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/a.php"] [unique_id "aSHU4HXe1xL-_YOdRmT3_AAAAZM"]
[Sat Nov 22 23:21:04.841964 2025] [:error] [pid 9547:tid 9576] [client 172.192.65.105:22313] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/a.php"] [unique_id "aSHU4NClOR5qk7DoMeEb4QAAAVc"]
[Sat Nov 22 23:21:05.070786 2025] [:error] [pid 53478:tid 53509] [client 172.192.65.105:22374] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/a.php"] [unique_id "aSHU4QhUYdXBbQswAdRDTAAAAEA"]
[Sat Nov 22 23:21:05.298135 2025] [:error] [pid 53478:tid 53529] [client 172.192.65.105:22324] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/a.php"] [unique_id "aSHU4QhUYdXBbQswAdRDTQAAAFQ"]
[Sat Nov 22 23:21:05.545418 2025] [:error] [pid 53477:tid 53503] [client 172.192.65.105:22326] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/api.php"] [unique_id "aSHU4X7Lu30Ku9O40aIKdgAAABY"]
[Sat Nov 22 23:21:05.800012 2025] [:error] [pid 53478:tid 53525] [client 172.192.65.105:22383] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/api.php"] [unique_id "aSHU4QhUYdXBbQswAdRDTgAAAFA"]
[Sat Nov 22 23:21:06.031335 2025] [:error] [pid 53478:tid 53528] [client 172.192.65.105:8100] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/api.php"] [unique_id "aSHU4ghUYdXBbQswAdRDTwAAAFM"]
[Sat Nov 22 23:21:06.259385 2025] [:error] [pid 9547:tid 9561] [client 172.192.65.105:22332] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/api.php"] [unique_id "aSHU4tClOR5qk7DoMeEb5gAAAUg"]
[Sat Nov 22 23:21:06.486743 2025] [:error] [pid 53478:tid 53532] [client 172.192.65.105:8168] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/inc.php"] [unique_id "aSHU4ghUYdXBbQswAdRDUAAAAFc"]
[Sat Nov 22 23:21:06.717986 2025] [:error] [pid 53566:tid 53580] [client 172.192.65.105:22348] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/inc.php"] [unique_id "aSHU4sbSHDBkRbwMbd58HQAAAMw"]
[Sat Nov 22 23:21:06.945509 2025] [:error] [pid 53478:tid 53526] [client 172.192.65.105:8154] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/inc.php"] [unique_id "aSHU4ghUYdXBbQswAdRDUQAAAFE"]
[Sat Nov 22 23:21:07.175483 2025] [:error] [pid 44259:tid 44286] [client 172.192.65.105:8180] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/inc.php"] [unique_id "aSHU43Xe1xL-_YOdRmT3_wAAAZg"]
[Sat Nov 22 23:21:07.402957 2025] [:error] [pid 25856:tid 25882] [client 172.192.65.105:22329] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/siteheads.php"] [unique_id "aSHU4xsTP0wy94zKUvEO7QAAARg"]
[Sat Nov 22 23:21:07.630938 2025] [:error] [pid 44259:tid 44283] [client 172.192.65.105:22372] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/siteheads.php"] [unique_id "aSHU43Xe1xL-_YOdRmT4AAAAAZU"]
[Sat Nov 22 23:21:07.858444 2025] [:error] [pid 44259:tid 44270] [client 172.192.65.105:8084] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/siteheads.php"] [unique_id "aSHU43Xe1xL-_YOdRmT4AgAAAYg"]
[Sat Nov 22 23:21:08.085179 2025] [:error] [pid 44259:tid 44279] [client 172.192.65.105:8068] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/siteheads.php"] [unique_id "aSHU5HXe1xL-_YOdRmT4BAAAAZE"]
[Sat Nov 22 23:21:08.312901 2025] [:error] [pid 44259:tid 44275] [client 172.192.65.105:8033] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/atomlib.php"] [unique_id "aSHU5HXe1xL-_YOdRmT4BQAAAY0"]
[Sat Nov 22 23:21:08.539964 2025] [:error] [pid 25856:tid 25879] [client 172.192.65.105:8178] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/atomlib.php"] [unique_id "aSHU5BsTP0wy94zKUvEO7gAAARU"]
[Sat Nov 22 23:21:08.767937 2025] [:error] [pid 9547:tid 9575] [client 172.192.65.105:8167] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/atomlib.php"] [unique_id "aSHU5NClOR5qk7DoMeEb6wAAAVY"]
[Sat Nov 22 23:21:09.000124 2025] [:error] [pid 53478:tid 53531] [client 172.192.65.105:8074] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/atomlib.php"] [unique_id "aSHU5AhUYdXBbQswAdRDUgAAAFY"]
[Sat Nov 22 23:21:09.226515 2025] [:error] [pid 44259:tid 44278] [client 172.192.65.105:8132] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/adminfuns.php"] [unique_id "aSHU5XXe1xL-_YOdRmT4BgAAAZA"]
[Sat Nov 22 23:21:09.455355 2025] [:error] [pid 53479:tid 53558] [client 172.192.65.105:22356] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/adminfuns.php"] [unique_id "aSHU5W6cicFF3Aas-oTq-QAAAJY"]
[Sat Nov 22 23:21:09.681738 2025] [:error] [pid 53479:tid 53540] [client 172.192.65.105:22320] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/adminfuns.php"] [unique_id "aSHU5W6cicFF3Aas-oTq-gAAAIQ"]
[Sat Nov 22 23:21:09.911161 2025] [:error] [pid 53478:tid 53511] [client 172.192.65.105:22363] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/adminfuns.php"] [unique_id "aSHU5QhUYdXBbQswAdRDVAAAAEI"]
[Sat Nov 22 23:21:10.137312 2025] [:error] [pid 53478:tid 53519] [client 172.192.65.105:8188] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-rex4.php7"] [unique_id "aSHU5ghUYdXBbQswAdRDVgAAAEo"]
[Sat Nov 22 23:21:10.364727 2025] [:error] [pid 53478:tid 53510] [client 172.192.65.105:22272] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-rex4.php7"] [unique_id "aSHU5ghUYdXBbQswAdRDVwAAAEE"]
[Sat Nov 22 23:21:10.598494 2025] [:error] [pid 53479:tid 53557] [client 172.192.65.105:8130] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-rex4.php7"] [unique_id "aSHU5m6cicFF3Aas-oTrAAAAAJU"]
[Sat Nov 22 23:21:10.830003 2025] [:error] [pid 53566:tid 53576] [client 172.192.65.105:22303] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-rex4.php7"] [unique_id "aSHU5sbSHDBkRbwMbd58MQAAAMg"]
[Sat Nov 22 23:21:11.057627 2025] [:error] [pid 53566:tid 53574] [client 172.192.65.105:8138] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/moon.php"] [unique_id "aSHU58bSHDBkRbwMbd58NwAAAMY"]
[Sat Nov 22 23:21:11.288738 2025] [:error] [pid 53479:tid 53545] [client 172.192.65.105:8066] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/moon.php"] [unique_id "aSHU526cicFF3Aas-oTrBQAAAIk"]
[Sat Nov 22 23:21:11.517333 2025] [:error] [pid 53479:tid 53560] [client 172.192.65.105:8069] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/moon.php"] [unique_id "aSHU526cicFF3Aas-oTrCAAAAJg"]
[Sat Nov 22 23:21:11.745104 2025] [:error] [pid 9547:tid 9564] [client 172.192.65.105:8151] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/moon.php"] [unique_id "aSHU59ClOR5qk7DoMeEb9wAAAUs"]
[Sat Nov 22 23:21:11.975168 2025] [:error] [pid 53477:tid 53488] [client 172.192.65.105:8092] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-info.php"] [unique_id "aSHU537Lu30Ku9O40aIKiQAAAAc"]
[Sat Nov 22 23:21:12.248191 2025] [:error] [pid 25856:tid 25864] [client 172.192.65.105:8147] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-info.php"] [unique_id "aSHU6BsTP0wy94zKUvEO-wAAAQY"]
[Sat Nov 22 23:21:12.489881 2025] [:error] [pid 53479:tid 53554] [client 172.192.65.105:8007] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-info.php"] [unique_id "aSHU6G6cicFF3Aas-oTrCQAAAJI"]
[Sat Nov 22 23:21:12.755139 2025] [:error] [pid 53479:tid 53552] [client 172.192.65.105:22312] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-info.php"] [unique_id "aSHU6G6cicFF3Aas-oTrCwAAAJA"]
[Sat Nov 22 23:21:12.997703 2025] [:error] [pid 9547:tid 9566] [client 172.192.65.105:8070] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/warm.PhP7"] [unique_id "aSHU6NClOR5qk7DoMeEb-QAAAU0"]
[Sat Nov 22 23:21:13.269410 2025] [:error] [pid 9547:tid 9568] [client 172.192.65.105:22341] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/warm.PhP7"] [unique_id "aSHU6dClOR5qk7DoMeEb-wAAAU8"]
[Sat Nov 22 23:21:13.500164 2025] [:error] [pid 9547:tid 9575] [client 172.192.65.105:8175] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/warm.PhP7"] [unique_id "aSHU6dClOR5qk7DoMeEb_AAAAVY"]
[Sat Nov 22 23:21:13.765219 2025] [:error] [pid 53566:tid 53575] [client 172.192.65.105:22314] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/warm.PhP7"] [unique_id "aSHU6cbSHDBkRbwMbd58QQAAAMc"]
[Sat Nov 22 23:21:13.993054 2025] [:error] [pid 25856:tid 25868] [client 172.192.65.105:8133] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ws.php7"] [unique_id "aSHU6RsTP0wy94zKUvEO_QAAAQo"]
[Sat Nov 22 23:21:14.225525 2025] [:error] [pid 53479:tid 53558] [client 172.192.65.105:8145] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ws.php7"] [unique_id "aSHU6m6cicFF3Aas-oTrDQAAAJY"]
[Sat Nov 22 23:21:14.452051 2025] [:error] [pid 53566:tid 53583] [client 172.192.65.105:8109] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ws.php7"] [unique_id "aSHU6sbSHDBkRbwMbd58QwAAAM8"]
[Sat Nov 22 23:21:14.678897 2025] [:error] [pid 25856:tid 25882] [client 172.192.65.105:8190] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ws.php7"] [unique_id "aSHU6hsTP0wy94zKUvEO_gAAARg"]
[Sat Nov 22 23:21:14.939377 2025] [:error] [pid 25856:tid 25865] [client 172.192.65.105:8152] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/rss.php"] [unique_id "aSHU6hsTP0wy94zKUvEO_wAAAQc"]
[Sat Nov 22 23:21:15.168286 2025] [:error] [pid 9547:tid 9567] [client 172.192.65.105:22331] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/rss.php"] [unique_id "aSHU69ClOR5qk7DoMeEb_gAAAU4"]
[Sat Nov 22 23:21:15.396154 2025] [:error] [pid 44259:tid 44285] [client 172.192.65.105:8184] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/rss.php"] [unique_id "aSHU63Xe1xL-_YOdRmT4DQAAAZc"]
[Sat Nov 22 23:21:15.635380 2025] [:error] [pid 44259:tid 44263] [client 172.192.65.105:8091] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/rss.php"] [unique_id "aSHU63Xe1xL-_YOdRmT4DwAAAYE"]
[Sat Nov 22 23:21:15.864899 2025] [:error] [pid 25856:tid 25863] [client 172.192.65.105:8096] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/pekok.php"] [unique_id "aSHU6xsTP0wy94zKUvEPAgAAAQU"]
[Sat Nov 22 23:21:16.144383 2025] [:error] [pid 44259:tid 44283] [client 172.192.65.105:8115] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/pekok.php"] [unique_id "aSHU7HXe1xL-_YOdRmT4EAAAAZU"]
[Sat Nov 22 23:21:16.379872 2025] [:error] [pid 44259:tid 44266] [client 172.192.65.105:8035] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/pekok.php"] [unique_id "aSHU7HXe1xL-_YOdRmT4EQAAAYQ"]
[Sat Nov 22 23:21:16.606974 2025] [:error] [pid 44259:tid 44284] [client 172.192.65.105:8164] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/pekok.php"] [unique_id "aSHU7HXe1xL-_YOdRmT4EgAAAZY"]
[Sat Nov 22 23:21:16.872849 2025] [:error] [pid 9547:tid 9554] [client 172.192.65.105:8028] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/elp.php"] [unique_id "aSHU7NClOR5qk7DoMeEcBwAAAUE"]
[Sat Nov 22 23:21:17.110301 2025] [:error] [pid 9547:tid 9572] [client 172.192.65.105:22357] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/elp.php"] [unique_id "aSHU7dClOR5qk7DoMeEcCQAAAVM"]
[Sat Nov 22 23:21:17.337381 2025] [:error] [pid 53477:tid 53500] [client 172.192.65.105:22334] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/elp.php"] [unique_id "aSHU7X7Lu30Ku9O40aIKmwAAABM"]
[Sat Nov 22 23:21:17.569255 2025] [:error] [pid 53566:tid 53580] [client 172.192.65.105:22317] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/elp.php"] [unique_id "aSHU7cbSHDBkRbwMbd58WQAAAMw"]
[Sat Nov 22 23:21:17.797782 2025] [:error] [pid 53566:tid 53569] [client 172.192.65.105:8080] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-aa.php"] [unique_id "aSHU7cbSHDBkRbwMbd58XQAAAME"]
[Sat Nov 22 23:21:18.072927 2025] [:error] [pid 53479:tid 53539] [client 172.192.65.105:22327] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-aa.php"] [unique_id "aSHU7m6cicFF3Aas-oTrGQAAAIM"]
[Sat Nov 22 23:21:18.299464 2025] [:error] [pid 53477:tid 53489] [client 172.192.65.105:8148] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-aa.php"] [unique_id "aSHU7n7Lu30Ku9O40aIKpwAAAAg"]
[Sat Nov 22 23:21:18.527806 2025] [:error] [pid 53566:tid 53589] [client 172.192.65.105:22312] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-aa.php"] [unique_id "aSHU7sbSHDBkRbwMbd58ZQAAANU"]
[Sat Nov 22 23:21:18.755222 2025] [:error] [pid 53478:tid 53522] [client 172.192.65.105:8136] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cart.php"] [unique_id "aSHU7ghUYdXBbQswAdRDWQAAAE0"]
[Sat Nov 22 23:21:18.982158 2025] [:error] [pid 53566:tid 53575] [client 172.192.65.105:8156] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cart.php"] [unique_id "aSHU7sbSHDBkRbwMbd58aAAAAMc"]
[Sat Nov 22 23:21:19.210083 2025] [:error] [pid 44259:tid 44272] [client 172.192.65.105:7940] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cart.php"] [unique_id "aSHU73Xe1xL-_YOdRmT4HQAAAYo"]
[Sat Nov 22 23:21:19.437476 2025] [:error] [pid 53479:tid 53540] [client 172.192.65.105:8011] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cart.php"] [unique_id "aSHU726cicFF3Aas-oTrHwAAAIQ"]
[Sat Nov 22 23:21:19.715616 2025] [:error] [pid 53566:tid 53582] [client 172.192.65.105:8005] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/categories.php"] [unique_id "aSHU78bSHDBkRbwMbd58bgAAAM4"]
[Sat Nov 22 23:21:19.948803 2025] [:error] [pid 53478:tid 53521] [client 172.192.65.105:22338] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/categories.php"] [unique_id "aSHU7whUYdXBbQswAdRDWwAAAEw"]
[Sat Nov 22 23:21:20.179735 2025] [:error] [pid 53477:tid 53488] [client 172.192.65.105:8087] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/categories.php"] [unique_id "aSHU8H7Lu30Ku9O40aIKtAAAAAc"]
[Sat Nov 22 23:21:20.412025 2025] [:error] [pid 53566:tid 53577] [client 172.192.65.105:8075] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/categories.php"] [unique_id "aSHU8MbSHDBkRbwMbd58cwAAAMk"]
[Sat Nov 22 23:21:20.640142 2025] [:error] [pid 44259:tid 44281] [client 172.192.65.105:8149] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/compare.php"] [unique_id "aSHU8HXe1xL-_YOdRmT4HwAAAZM"]
[Sat Nov 22 23:21:20.917443 2025] [:error] [pid 53477:tid 53481] [client 172.192.65.105:8077] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/compare.php"] [unique_id "aSHU8H7Lu30Ku9O40aIKtQAAAAA"]
[Sat Nov 22 23:21:21.145171 2025] [:error] [pid 53478:tid 53528] [client 172.192.65.105:8095] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/compare.php"] [unique_id "aSHU8QhUYdXBbQswAdRDXwAAAFM"]
[Sat Nov 22 23:21:21.372383 2025] [:error] [pid 53478:tid 53526] [client 172.192.65.105:8165] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/compare.php"] [unique_id "aSHU8QhUYdXBbQswAdRDYAAAAFE"]
[Sat Nov 22 23:21:21.599841 2025] [:error] [pid 44259:tid 44264] [client 172.192.65.105:22358] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/refund.php"] [unique_id "aSHU8XXe1xL-_YOdRmT4IwAAAYI"]
[Sat Nov 22 23:21:21.826355 2025] [:error] [pid 44259:tid 44279] [client 172.192.65.105:8085] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/refund.php"] [unique_id "aSHU8XXe1xL-_YOdRmT4JQAAAZE"]
[Sat Nov 22 23:21:22.055741 2025] [:error] [pid 53566:tid 53589] [client 172.192.65.105:22318] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/refund.php"] [unique_id "aSHU8sbSHDBkRbwMbd58eAAAANU"]
[Sat Nov 22 23:21:22.284857 2025] [:error] [pid 53477:tid 53482] [client 172.192.65.105:22344] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/refund.php"] [unique_id "aSHU8n7Lu30Ku9O40aIKuwAAAAE"]
[Sat Nov 22 23:21:22.556267 2025] [:error] [pid 53566:tid 53575] [client 172.192.65.105:22385] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shop.php"] [unique_id "aSHU8sbSHDBkRbwMbd58egAAAMc"]
[Sat Nov 22 23:21:22.789889 2025] [:error] [pid 25856:tid 25861] [client 172.192.65.105:8124] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shop.php"] [unique_id "aSHU8hsTP0wy94zKUvEPBQAAAQM"]
[Sat Nov 22 23:21:23.056685 2025] [:error] [pid 53479:tid 53553] [client 172.192.65.105:8170] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shop.php"] [unique_id "aSHU826cicFF3Aas-oTrIAAAAJE"]
[Sat Nov 22 23:21:23.335114 2025] [:error] [pid 44259:tid 44278] [client 172.192.65.105:8082] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/shop.php"] [unique_id "aSHU83Xe1xL-_YOdRmT4JwAAAZA"]
[Sat Nov 22 23:21:23.610319 2025] [:error] [pid 44259:tid 44265] [client 172.192.65.105:22399] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wishlist.php"] [unique_id "aSHU83Xe1xL-_YOdRmT4KAAAAYM"]
[Sat Nov 22 23:21:23.838314 2025] [:error] [pid 25856:tid 25858] [client 172.192.65.105:22301] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wishlist.php"] [unique_id "aSHU8xsTP0wy94zKUvEPBgAAAQA"]
[Sat Nov 22 23:21:24.104328 2025] [:error] [pid 44259:tid 44267] [client 172.192.65.105:8157] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wishlist.php"] [unique_id "aSHU9HXe1xL-_YOdRmT4KQAAAYU"]
[Sat Nov 22 23:21:24.351217 2025] [:error] [pid 44259:tid 44277] [client 172.192.65.105:8163] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wishlist.php"] [unique_id "aSHU9HXe1xL-_YOdRmT4KwAAAY8"]
[Sat Nov 22 23:21:24.579361 2025] [:error] [pid 9547:tid 9561] [client 172.192.65.105:8121] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/results.php"] [unique_id "aSHU9NClOR5qk7DoMeEcGwAAAUg"]
[Sat Nov 22 23:21:24.805853 2025] [:error] [pid 53566:tid 53569] [client 172.192.65.105:8150] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/results.php"] [unique_id "aSHU9MbSHDBkRbwMbd58ggAAAME"]
[Sat Nov 22 23:21:25.032412 2025] [:error] [pid 9547:tid 9566] [client 172.192.65.105:8106] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/results.php"] [unique_id "aSHU9dClOR5qk7DoMeEcHQAAAU0"]
[Sat Nov 22 23:21:25.287497 2025] [:error] [pid 44259:tid 44276] [client 172.192.65.105:8060] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/results.php"] [unique_id "aSHU9XXe1xL-_YOdRmT4LAAAAY4"]
[Sat Nov 22 23:21:25.523206 2025] [:error] [pid 53479:tid 53536] [client 172.192.65.105:8086] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/api.php"] [unique_id "aSHU9W6cicFF3Aas-oTrKAAAAIA"]
[Sat Nov 22 23:21:25.750177 2025] [:error] [pid 44259:tid 44262] [client 172.192.65.105:8166] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/api.php"] [unique_id "aSHU9XXe1xL-_YOdRmT4LQAAAYA"]
[Sat Nov 22 23:21:25.976900 2025] [:error] [pid 53479:tid 53544] [client 172.192.65.105:22351] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/api.php"] [unique_id "aSHU9W6cicFF3Aas-oTrKwAAAIg"]
[Sat Nov 22 23:21:26.204265 2025] [:error] [pid 44259:tid 44274] [client 172.192.65.105:8119] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/api.php"] [unique_id "aSHU9nXe1xL-_YOdRmT4LwAAAYw"]
[Sat Nov 22 23:21:26.436175 2025] [:error] [pid 44259:tid 44271] [client 172.192.65.105:8094] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/222.php"] [unique_id "aSHU9nXe1xL-_YOdRmT4MAAAAYk"]
[Sat Nov 22 23:21:26.664993 2025] [:error] [pid 9547:tid 9573] [client 172.192.65.105:8183] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/222.php"] [unique_id "aSHU9tClOR5qk7DoMeEcIQAAAVQ"]
[Sat Nov 22 23:21:26.892967 2025] [:error] [pid 9547:tid 9569] [client 172.192.65.105:7966] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/222.php"] [unique_id "aSHU9tClOR5qk7DoMeEcIwAAAVA"]
[Sat Nov 22 23:21:27.120204 2025] [:error] [pid 53479:tid 53537] [client 172.192.65.105:22345] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/222.php"] [unique_id "aSHU926cicFF3Aas-oTrLAAAAIE"]
[Sat Nov 22 23:21:27.355244 2025] [:error] [pid 9547:tid 9563] [client 172.192.65.105:8081] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/atom.php"] [unique_id "aSHU99ClOR5qk7DoMeEcJAAAAUo"]
[Sat Nov 22 23:21:27.633069 2025] [:error] [pid 44259:tid 44281] [client 172.192.65.105:22384] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/atom.php"] [unique_id "aSHU93Xe1xL-_YOdRmT4MQAAAZM"]
[Sat Nov 22 23:21:27.874790 2025] [:error] [pid 25856:tid 25873] [client 172.192.65.105:8114] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/atom.php"] [unique_id "aSHU9xsTP0wy94zKUvEPDQAAAQ8"]
[Sat Nov 22 23:21:28.113447 2025] [:error] [pid 53566:tid 53580] [client 172.192.65.105:8159] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/atom.php"] [unique_id "aSHU-MbSHDBkRbwMbd58kAAAAMw"]
[Sat Nov 22 23:21:28.342222 2025] [:error] [pid 25856:tid 25868] [client 172.192.65.105:7989] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/case.php"] [unique_id "aSHU-BsTP0wy94zKUvEPDgAAAQo"]
[Sat Nov 22 23:21:28.581879 2025] [:error] [pid 44259:tid 44285] [client 172.192.65.105:8104] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/case.php"] [unique_id "aSHU-HXe1xL-_YOdRmT4MgAAAZc"]
[Sat Nov 22 23:21:28.813007 2025] [:error] [pid 9547:tid 9556] [client 172.192.65.105:22315] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/case.php"] [unique_id "aSHU-NClOR5qk7DoMeEcJgAAAUM"]
[Sat Nov 22 23:21:29.040722 2025] [:error] [pid 44259:tid 44266] [client 172.192.65.105:8017] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/case.php"] [unique_id "aSHU-XXe1xL-_YOdRmT4NAAAAYQ"]
[Sat Nov 22 23:21:29.294986 2025] [:error] [pid 9547:tid 9553] [client 172.192.65.105:8110] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/docs.php"] [unique_id "aSHU-dClOR5qk7DoMeEcJwAAAUA"]
[Sat Nov 22 23:21:29.541566 2025] [:error] [pid 9547:tid 9577] [client 172.192.65.105:8018] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/docs.php"] [unique_id "aSHU-dClOR5qk7DoMeEcKAAAAVg"]
[Sat Nov 22 23:21:29.767823 2025] [:error] [pid 9547:tid 9572] [client 172.192.65.105:8000] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/docs.php"] [unique_id "aSHU-dClOR5qk7DoMeEcKgAAAVM"]
[Sat Nov 22 23:21:29.994593 2025] [:error] [pid 9547:tid 9576] [client 172.192.65.105:8098] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/docs.php"] [unique_id "aSHU-dClOR5qk7DoMeEcLAAAAVc"]
[Sat Nov 22 23:21:30.221200 2025] [:error] [pid 53479:tid 53550] [client 172.192.65.105:8012] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ios.php"] [unique_id "aSHU-m6cicFF3Aas-oTrLgAAAI4"]
[Sat Nov 22 23:21:30.494002 2025] [:error] [pid 53566:tid 53568] [client 172.192.65.105:8102] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ios.php"] [unique_id "aSHU-sbSHDBkRbwMbd58mAAAAMA"]
[Sat Nov 22 23:21:30.720532 2025] [:error] [pid 53477:tid 53503] [client 172.192.65.105:8083] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ios.php"] [unique_id "aSHU-n7Lu30Ku9O40aIKyQAAABY"]
[Sat Nov 22 23:21:30.945853 2025] [:error] [pid 53477:tid 53498] [client 172.192.65.105:8127] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ios.php"] [unique_id "aSHU-n7Lu30Ku9O40aIKygAAABE"]
[Sat Nov 22 23:21:31.180160 2025] [:error] [pid 53477:tid 53490] [client 172.192.65.105:8036] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/click.php"] [unique_id "aSHU-37Lu30Ku9O40aIKywAAAAk"]
[Sat Nov 22 23:21:31.476785 2025] [:error] [pid 53477:tid 53486] [client 172.192.65.105:8105] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/click.php"] [unique_id "aSHU-37Lu30Ku9O40aIKzAAAAAU"]
[Sat Nov 22 23:21:31.703164 2025] [:error] [pid 53479:tid 53548] [client 172.192.65.105:8107] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/click.php"] [unique_id "aSHU-26cicFF3Aas-oTrMQAAAIw"]
[Sat Nov 22 23:21:31.930090 2025] [:error] [pid 53479:tid 53542] [client 172.192.65.105:8174] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/click.php"] [unique_id "aSHU-26cicFF3Aas-oTrMgAAAIY"]
[Sat Nov 22 23:21:32.202340 2025] [:error] [pid 44259:tid 44268] [client 172.192.65.105:8120] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lv.php"] [unique_id "aSHU_HXe1xL-_YOdRmT4NwAAAYY"]
[Sat Nov 22 23:21:32.469830 2025] [:error] [pid 53477:tid 53487] [client 172.192.65.105:8181] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lv.php"] [unique_id "aSHU_H7Lu30Ku9O40aIKzQAAAAY"]
[Sat Nov 22 23:21:32.700779 2025] [:error] [pid 53478:tid 53528] [client 172.192.65.105:8142] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lv.php"] [unique_id "aSHU_AhUYdXBbQswAdRDbQAAAFM"]
[Sat Nov 22 23:21:32.927924 2025] [:error] [pid 53479:tid 53545] [client 172.192.65.105:8113] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/lv.php"] [unique_id "aSHU_G6cicFF3Aas-oTrNAAAAIk"]
[Sat Nov 22 23:21:33.155146 2025] [:error] [pid 53477:tid 53492] [client 172.192.65.105:22314] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/inputs.php"] [unique_id "aSHU_X7Lu30Ku9O40aIKzgAAAAs"]
[Sat Nov 22 23:21:33.382423 2025] [:error] [pid 25856:tid 25875] [client 172.192.65.105:8161] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/inputs.php"] [unique_id "aSHU_RsTP0wy94zKUvEPFAAAARE"]
[Sat Nov 22 23:21:33.610013 2025] [:error] [pid 44259:tid 44278] [client 172.192.65.105:22309] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/inputs.php"] [unique_id "aSHU_XXe1xL-_YOdRmT4OwAAAZA"]
[Sat Nov 22 23:21:33.837740 2025] [:error] [pid 25856:tid 25881] [client 172.192.65.105:8189] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/inputs.php"] [unique_id "aSHU_RsTP0wy94zKUvEPFQAAARc"]
[Sat Nov 22 23:21:34.066266 2025] [:error] [pid 53566:tid 53581] [client 172.192.65.105:8116] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/alfa.php"] [unique_id "aSHU_sbSHDBkRbwMbd58oAAAAM0"]
[Sat Nov 22 23:21:34.343432 2025] [:error] [pid 53479:tid 53559] [client 172.192.65.105:8039] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/alfa.php"] [unique_id "aSHU_m6cicFF3Aas-oTrNgAAAJc"]
[Sat Nov 22 23:21:34.573724 2025] [:error] [pid 53566:tid 53569] [client 172.192.65.105:22307] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/alfa.php"] [unique_id "aSHU_sbSHDBkRbwMbd58ogAAAME"]
[Sat Nov 22 23:21:34.805338 2025] [:error] [pid 53479:tid 53539] [client 172.192.65.105:8021] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/alfa.php"] [unique_id "aSHU_m6cicFF3Aas-oTrOAAAAIM"]
[Sat Nov 22 23:21:54.459639 2025] [:error] [pid 9547:tid 9572] [client 172.192.65.105:8158] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/2.php"] [unique_id "aSHVEtClOR5qk7DoMeEcVgAAAVM"]
[Sat Nov 22 23:21:54.693444 2025] [:error] [pid 25856:tid 25881] [client 172.192.65.105:8112] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/2.php"] [unique_id "aSHVEhsTP0wy94zKUvEPQQAAARc"]
[Sat Nov 22 23:21:54.920503 2025] [:error] [pid 53477:tid 53487] [client 172.192.65.105:7939] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/2.php"] [unique_id "aSHVEn7Lu30Ku9O40aIK2AAAAAY"]
[Sat Nov 22 23:21:55.148562 2025] [:error] [pid 44259:tid 44262] [client 172.192.65.105:8063] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/2.php"] [unique_id "aSHVE3Xe1xL-_YOdRmT4VAAAAYA"]
[Sat Nov 22 23:21:55.384171 2025] [:error] [pid 9547:tid 9566] [client 172.192.65.105:8111] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/goods.php"] [unique_id "aSHVE9ClOR5qk7DoMeEcWgAAAU0"]
[Sat Nov 22 23:21:55.611836 2025] [:error] [pid 44259:tid 44285] [client 172.192.65.105:8099] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/goods.php"] [unique_id "aSHVE3Xe1xL-_YOdRmT4VQAAAZc"]
[Sat Nov 22 23:21:55.856884 2025] [:error] [pid 9547:tid 9557] [client 172.192.65.105:8052] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/goods.php"] [unique_id "aSHVE9ClOR5qk7DoMeEcWwAAAUQ"]
[Sat Nov 22 23:21:56.085920 2025] [:error] [pid 9547:tid 9565] [client 172.192.65.105:8072] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/goods.php"] [unique_id "aSHVFNClOR5qk7DoMeEcXQAAAUw"]
[Sat Nov 22 23:21:56.325418 2025] [:error] [pid 53566:tid 53573] [client 172.192.65.105:8093] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/manager.php"] [unique_id "aSHVFMbSHDBkRbwMbd58zgAAAMU"]
[Sat Nov 22 23:21:56.555747 2025] [:error] [pid 25856:tid 25876] [client 172.192.65.105:8031] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/manager.php"] [unique_id "aSHVFBsTP0wy94zKUvEPRQAAARI"]
[Sat Nov 22 23:21:56.782135 2025] [:error] [pid 44259:tid 44278] [client 172.192.65.105:8046] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/manager.php"] [unique_id "aSHVFHXe1xL-_YOdRmT4WQAAAZA"]
[Sat Nov 22 23:21:57.010147 2025] [:error] [pid 44259:tid 44275] [client 172.192.65.105:8010] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/manager.php"] [unique_id "aSHVFXXe1xL-_YOdRmT4WgAAAY0"]
[Sat Nov 22 23:21:57.237382 2025] [:error] [pid 53566:tid 53576] [client 172.192.65.105:22365] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/new.php"] [unique_id "aSHVFcbSHDBkRbwMbd58zwAAAMg"]
[Sat Nov 22 23:21:57.464396 2025] [:error] [pid 53477:tid 53485] [client 172.192.65.105:7963] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/new.php"] [unique_id "aSHVFX7Lu30Ku9O40aIK2gAAAAQ"]
[Sat Nov 22 23:21:57.690639 2025] [:error] [pid 53477:tid 53505] [client 172.192.65.105:7958] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/new.php"] [unique_id "aSHVFX7Lu30Ku9O40aIK2wAAABg"]
[Sat Nov 22 23:21:57.918333 2025] [:error] [pid 53566:tid 53586] [client 172.192.65.105:8126] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/new.php"] [unique_id "aSHVFcbSHDBkRbwMbd580AAAANI"]
[Sat Nov 22 23:21:58.155726 2025] [:error] [pid 53477:tid 53501] [client 172.192.65.105:8076] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/info.php"] [unique_id "aSHVFn7Lu30Ku9O40aIK3QAAABQ"]
[Sat Nov 22 23:21:58.396482 2025] [:error] [pid 53477:tid 53500] [client 172.192.65.105:8009] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/info.php"] [unique_id "aSHVFn7Lu30Ku9O40aIK3gAAABM"]
[Sat Nov 22 23:21:58.623424 2025] [:error] [pid 44259:tid 44284] [client 172.192.65.105:8108] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/info.php"] [unique_id "aSHVFnXe1xL-_YOdRmT4XQAAAZY"]
[Sat Nov 22 23:21:58.854995 2025] [:error] [pid 44259:tid 44279] [client 172.192.65.105:8003] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/info.php"] [unique_id "aSHVFnXe1xL-_YOdRmT4XwAAAZE"]
[Sat Nov 22 23:21:59.082201 2025] [:error] [pid 53477:tid 53484] [client 172.192.65.105:22335] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/doc.php"] [unique_id "aSHVF37Lu30Ku9O40aIK3wAAAAM"]
[Sat Nov 22 23:21:59.310290 2025] [:error] [pid 53566:tid 53568] [client 172.192.65.105:8015] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/doc.php"] [unique_id "aSHVF8bSHDBkRbwMbd580QAAAMA"]
[Sat Nov 22 23:21:59.537970 2025] [:error] [pid 44259:tid 44283] [client 172.192.65.105:22362] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/doc.php"] [unique_id "aSHVF3Xe1xL-_YOdRmT4YQAAAZU"]
[Sat Nov 22 23:21:59.767185 2025] [:error] [pid 9547:tid 9558] [client 172.192.65.105:8016] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/doc.php"] [unique_id "aSHVF9ClOR5qk7DoMeEcagAAAUU"]
[Sat Nov 22 23:21:59.994537 2025] [:error] [pid 9547:tid 9553] [client 172.192.65.105:8023] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/go.php"] [unique_id "aSHVF9ClOR5qk7DoMeEcbAAAAUA"]
[Sat Nov 22 23:22:00.221831 2025] [:error] [pid 53479:tid 53556] [client 172.192.65.105:8040] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/go.php"] [unique_id "aSHVGG6cicFF3Aas-oTrQgAAAJQ"]
[Sat Nov 22 23:22:00.450445 2025] [:error] [pid 53479:tid 53536] [client 172.192.65.105:8176] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/go.php"] [unique_id "aSHVGG6cicFF3Aas-oTrRAAAAIA"]
[Sat Nov 22 23:22:00.681083 2025] [:error] [pid 53566:tid 53571] [client 172.192.65.105:8117] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/go.php"] [unique_id "aSHVGMbSHDBkRbwMbd580wAAAMM"]
[Sat Nov 22 23:22:00.907806 2025] [:error] [pid 53478:tid 53525] [client 172.192.65.105:7944] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/el.php"] [unique_id "aSHVGAhUYdXBbQswAdRDdwAAAFA"]
[Sat Nov 22 23:22:01.137148 2025] [:error] [pid 53477:tid 53489] [client 172.192.65.105:8034] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/el.php"] [unique_id "aSHVGX7Lu30Ku9O40aIK4gAAAAg"]
[Sat Nov 22 23:22:01.368459 2025] [:error] [pid 44259:tid 44286] [client 172.192.65.105:8024] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/el.php"] [unique_id "aSHVGXXe1xL-_YOdRmT4YwAAAZg"]
[Sat Nov 22 23:22:01.598047 2025] [:error] [pid 53566:tid 53592] [client 172.192.65.105:8191] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/el.php"] [unique_id "aSHVGcbSHDBkRbwMbd581AAAANg"]
[Sat Nov 22 23:22:01.824470 2025] [:error] [pid 53477:tid 53483] [client 172.192.65.105:8155] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/mail.php"] [unique_id "aSHVGX7Lu30Ku9O40aIK5AAAAAI"]
[Sat Nov 22 23:22:02.051207 2025] [:error] [pid 53477:tid 53495] [client 172.192.65.105:7959] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/mail.php"] [unique_id "aSHVGn7Lu30Ku9O40aIK5QAAAA4"]
[Sat Nov 22 23:22:02.279492 2025] [:error] [pid 25856:tid 25871] [client 172.192.65.105:7948] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/mail.php"] [unique_id "aSHVGhsTP0wy94zKUvEPUQAAAQ0"]
[Sat Nov 22 23:22:02.514053 2025] [:error] [pid 53477:tid 53497] [client 172.192.65.105:7889] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/mail.php"] [unique_id "aSHVGn7Lu30Ku9O40aIK5gAAABA"]
[Sat Nov 22 23:22:02.745885 2025] [:error] [pid 53566:tid 53574] [client 172.192.65.105:8123] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/11.php"] [unique_id "aSHVGsbSHDBkRbwMbd581QAAAMY"]
[Sat Nov 22 23:22:02.973059 2025] [:error] [pid 53566:tid 53584] [client 172.192.65.105:8045] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/11.php"] [unique_id "aSHVGsbSHDBkRbwMbd581gAAANA"]
[Sat Nov 22 23:22:03.199719 2025] [:error] [pid 9547:tid 9554] [client 172.192.65.105:8056] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/11.php"] [unique_id "aSHVG9ClOR5qk7DoMeEccwAAAUE"]
[Sat Nov 22 23:22:03.427957 2025] [:error] [pid 9547:tid 9569] [client 172.192.65.105:8004] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/11.php"] [unique_id "aSHVG9ClOR5qk7DoMeEcdQAAAVA"]
[Sat Nov 22 23:22:03.656324 2025] [:error] [pid 25856:tid 25874] [client 172.192.65.105:8029] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/conflg.php"] [unique_id "aSHVGxsTP0wy94zKUvEPVAAAARA"]
[Sat Nov 22 23:22:03.884191 2025] [:error] [pid 9547:tid 9568] [client 172.192.65.105:8078] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/conflg.php"] [unique_id "aSHVG9ClOR5qk7DoMeEcegAAAU8"]
[Sat Nov 22 23:22:04.117498 2025] [:error] [pid 44259:tid 44280] [client 172.192.65.105:7981] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/conflg.php"] [unique_id "aSHVHHXe1xL-_YOdRmT4ZQAAAZI"]
[Sat Nov 22 23:22:04.344052 2025] [:error] [pid 44259:tid 44274] [client 172.192.65.105:7937] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/conflg.php"] [unique_id "aSHVHHXe1xL-_YOdRmT4ZwAAAYw"]
[Sat Nov 22 23:22:04.572038 2025] [:error] [pid 44259:tid 44281] [client 172.192.65.105:8025] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/xmrlpc.php"] [unique_id "aSHVHHXe1xL-_YOdRmT4aAAAAZM"]
[Sat Nov 22 23:22:04.803739 2025] [:error] [pid 25856:tid 25869] [client 172.192.65.105:8022] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/xmrlpc.php"] [unique_id "aSHVHBsTP0wy94zKUvEPVwAAAQs"]
[Sat Nov 22 23:22:05.036612 2025] [:error] [pid 9547:tid 9577] [client 172.192.65.105:7956] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/xmrlpc.php"] [unique_id "aSHVHdClOR5qk7DoMeEcfwAAAVg"]
[Sat Nov 22 23:22:05.309672 2025] [:error] [pid 9547:tid 9564] [client 172.192.65.105:8013] [client 172.192.65.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/xmrlpc.php"] [unique_id "aSHVHdClOR5qk7DoMeEcgQAAAUs"]
[Sat Nov 22 23:24:05.732988 2025] [:error] [pid 53478:tid 53514] [client 160.30.68.34:54539] [client 160.30.68.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.30.68.34, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSHVlQhUYdXBbQswAdRD_wAAAEU"]
[Sun Nov 23 05:28:21.159714 2025] [:error] [pid 38738:tid 38742] [client 188.166.221.180:56870] [client 188.166.221.180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/sftp-config.json"] [unique_id "aSIq9Qytc6TL9XavPmPJ7AAAAAA"]
[Sun Nov 23 16:45:42.654527 2025] [autoindex:error] [pid 38738:tid 38763] [client 140.99.1.32:65369] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/css/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:45:42.763061 2025] [autoindex:error] [pid 38738:tid 38759] [client 140.99.1.32:65369] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/js/dist/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:45:42.966260 2025] [autoindex:error] [pid 38738:tid 38747] [client 140.99.1.32:65369] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/assets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:45:43.068377 2025] [autoindex:error] [pid 38738:tid 38755] [client 140.99.1.32:65369] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-includes/sitemaps/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sun Nov 23 16:53:51.888081 2025] [:error] [pid 38738:tid 38744] [client 182.40.104.255:57120] [client 182.40.104.255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSLLnwytc6TL9XavPmMeuAAAAAI"]
[Sun Nov 23 23:06:30.505789 2025] [:error] [pid 8036:tid 8068] [client 189.62.10.13:51941] [client 189.62.10.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.10.13, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSMi9tBT69EcgFwgTmqKbwAAAhU"]
[Sun Nov 23 23:14:09.773717 2025] [:error] [pid 8036:tid 8056] [client 103.251.254.88:57806] [client 103.251.254.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.251.254.88, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSMkwdBT69EcgFwgTmqLUAAAAgk"]
[Sun Nov 23 23:32:36.661441 2025] [:error] [pid 38824:tid 38841] [client 221.229.106.25:51424] [client 221.229.106.25] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aSMpFE8WZjXLvbHTHPcT2QAAAM4"]
[Mon Nov 24 02:21:48.270221 2025] [:error] [pid 1453:tid 1488] [client 193.37.33.80:20489] [client 193.37.33.80] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.80, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSNQvBUBCt7LU0bO_GBeWAAAAIQ"]
[Mon Nov 24 05:39:22.912427 2025] [:error] [pid 12911:tid 12945] [client 203.2.64.59:43519] [client 203.2.64.59] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSN_CkDMbk9464jnIl7pMAAAAEM"]
[Mon Nov 24 05:52:05.667152 2025] [:error] [pid 12911:tid 12943] [client 193.37.33.62:53747] [client 193.37.33.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.62, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSOCBUDMbk9464jnIl7sGAAAAEE"]
[Mon Nov 24 05:53:06.939175 2025] [:error] [pid 12911:tid 12957] [client 20.251.204.209:13399] [client 20.251.204.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/old"] [unique_id "aSOCQkDMbk9464jnIl7sUAAAAE8"]
[Mon Nov 24 07:36:50.687409 2025] [:error] [pid 12912:tid 12986] [client 189.62.10.13:54692] [client 189.62.10.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wendybinks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wendybinks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSOakpMj_Lgt36UonYLqVwAAAJE"]
[Mon Nov 24 07:38:35.812131 2025] [:error] [pid 12912:tid 12971] [client 189.62.10.13:55763] [client 189.62.10.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.10.13, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSOa-5Mj_Lgt36UonYLqyQAAAII"]
[Mon Nov 24 07:40:05.319281 2025] [:error] [pid 12910:tid 12934] [client 189.62.10.13:56715] [client 189.62.10.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.10.13, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSObVWkWgvzAF2Nei2WanwAAABM"]
[Mon Nov 24 07:41:36.830994 2025] [:error] [pid 12912:tid 12981] [client 189.62.10.13:52408] [client 189.62.10.13] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.62.10.13, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSObsJMj_Lgt36UonYLrXwAAAIw"]
[Mon Nov 24 08:23:38.223432 2025] [:error] [pid 49900:tid 49906] [client 103.65.237.124:60909] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/sftp-config.json"] [unique_id "aSOlijCyPLrvg06aorloXwAAAAQ"]
[Mon Nov 24 08:23:38.472610 2025] [:error] [pid 49900:tid 49908] [client 103.65.237.124:50373] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.vscode/sftp.json"] [unique_id "aSOlijCyPLrvg06aorloYQAAAAY"]
[Mon Nov 24 11:57:31.392474 2025] [:error] [pid 48688:tid 48697] [client 180.102.134.69:34244] [client 180.102.134.69] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aSPXqxm2q1FkzLam7A1lkwAAAkU"]
[Mon Nov 24 15:20:49.988383 2025] [:error] [pid 9630:tid 9640] [client 159.223.132.86:47610] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSQHUSrSgUgPGkizt2rTXAAAAEg"]
[Mon Nov 24 15:20:50.609348 2025] [:error] [pid 48601:tid 48679] [client 159.223.132.86:47612] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/server"] [unique_id "aSQHUoMM4MaVTk74-Aab5gAAAhY"]
[Mon Nov 24 15:20:51.230695 2025] [:error] [pid 16549:tid 16574] [client 159.223.132.86:47624] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.vscode/sftp.json"] [unique_id "aSQHU6eWW19A99PUw_coXgAAAVU"]
[Mon Nov 24 15:20:51.852813 2025] [:error] [pid 49900:tid 49903] [client 159.223.132.86:47634] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about"] [unique_id "aSQHUzCyPLrvg06aorn0-AAAAAE"]
[Mon Nov 24 15:20:52.473830 2025] [:error] [pid 49900:tid 49908] [client 159.223.132.86:47640] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/debug/default/view"] [unique_id "aSQHVDCyPLrvg06aorn0-QAAAAY"]
[Mon Nov 24 15:20:53.094894 2025] [:error] [pid 48601:tid 48677] [client 159.223.132.86:47646] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/v2/_catalog"] [unique_id "aSQHVYMM4MaVTk74-Aab6QAAAhQ"]
[Mon Nov 24 15:20:53.716129 2025] [:error] [pid 48601:tid 48659] [client 159.223.132.86:47662] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSQHVYMM4MaVTk74-Aab6gAAAgI"]
[Mon Nov 24 15:20:54.339170 2025] [:error] [pid 16593:tid 16606] [client 159.223.132.86:47668] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/server-status"] [unique_id "aSQHVhVGznHBJI2LKpQrOgAAAos"]
[Mon Nov 24 15:20:54.961480 2025] [:error] [pid 16441:tid 16457] [client 159.223.132.86:47680] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/login.action"] [unique_id "aSQHVoq_bc5MOa9HflkOIQAAAI0"]
[Mon Nov 24 15:20:55.649094 2025] [:error] [pid 16549:tid 16556] [client 159.223.132.86:47692] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/_all_dbs"] [unique_id "aSQHV6eWW19A99PUw_coYAAAAUQ"]
[Mon Nov 24 15:20:56.341920 2025] [:error] [pid 48599:tid 48606] [client 159.223.132.86:47708] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.DS_Store"] [unique_id "aSQHWJzvu6PDJiRKE3IP_AAAAYM"]
[Mon Nov 24 15:20:57.071346 2025] [:error] [pid 48599:tid 48607] [client 159.223.132.86:47720] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.env"] [unique_id "aSQHWZzvu6PDJiRKE3IP_gAAAYQ"]
[Mon Nov 24 15:20:57.706011 2025] [:error] [pid 49900:tid 49907] [client 159.223.132.86:47734] [client 159.223.132.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aSQHWTCyPLrvg06aorn0_AAAAAU"]
[Mon Nov 24 15:20:58.328752 2025] [:error] [pid 16441:tid 16465] [client 159.223.132.86:47740] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSQHWoq_bc5MOa9HflkOIwAAAJU"]
[Mon Nov 24 15:20:58.951408 2025] [:error] [pid 48599:tid 48619] [client 159.223.132.86:47746] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/config.json"] [unique_id "aSQHWpzvu6PDJiRKE3IQAQAAAZA"]
[Mon Nov 24 15:20:59.573981 2025] [:error] [pid 9630:tid 9635] [client 159.223.132.86:34994] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/telescope/requests"] [unique_id "aSQHWyrSgUgPGkizt2rTZAAAAEM"]
[Mon Nov 24 15:21:00.194767 2025] [:error] [pid 16516:tid 16525] [client 159.223.132.86:35010] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/info.php"] [unique_id "aSQHXPqZbniwaNwL8XnT7wAAAQY"]
[Mon Nov 24 15:21:00.817605 2025] [:error] [pid 9630:tid 9641] [client 159.223.132.86:35024] [client 159.223.132.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSQHXCrSgUgPGkizt2rTZQAAAEk"]
[Mon Nov 24 18:18:39.679832 2025] [:error] [pid 9630:tid 9654] [client 182.42.105.144:51710] [client 182.42.105.144] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSQw_yrSgUgPGkizt2oBTQAAAFY"]
[Mon Nov 24 18:20:31.733105 2025] [:error] [pid 16441:tid 16451] [client 57.128.189.211:50584] [client 57.128.189.211] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 57.128.189.211, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSQxb4q_bc5MOa9HfllG0wAAAIc"]
[Mon Nov 24 18:20:41.104657 2025] [:error] [pid 48688:tid 48707] [client 146.59.70.146:57648] [client 146.59.70.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.59.70.146, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSQxeRm2q1FkzLam7A2mgwAAAk8"]
[Mon Nov 24 21:45:38.907123 2025] [:error] [pid 16549:tid 16552] [client 193.32.126.212:55134] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSRhgqeWW19A99PUw_doCAAAAUA"]
[Mon Nov 24 21:45:39.404895 2025] [:error] [pid 16593:tid 16613] [client 193.32.126.212:55652] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSRhgxVGznHBJI2LKpRsAgAAApI"]
[Mon Nov 24 21:45:39.897416 2025] [:error] [pid 48600:tid 48651] [client 193.32.126.212:56159] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhg_tOzSUAQvWVjBeiIAAAAdU"]
[Mon Nov 24 21:58:02.886520 2025] [:error] [pid 9630:tid 9640] [client 43.132.214.228:46484] [client 43.132.214.228] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aSRkairSgUgPGkizt2o8BgAAAEg"]
[Tue Nov 25 03:57:43.575253 2025] [:error] [pid 14168:tid 14181] [client 43.130.32.245:43886] [client 43.130.32.245] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSS4t_R-ZDU0QEgAIItNWgAAAMo"]
[Tue Nov 25 06:31:10.300243 2025] [:error] [pid 14076:tid 14082] [client 4.233.92.206:34196] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSTcrnsB4Gz6Qw-pvBsa5wAAAAE"]
[Tue Nov 25 06:31:14.520457 2025] [:error] [pid 1103:tid 1120] [client 4.233.92.206:34258] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSTcso0LETdqOlq63sQP4QAAAUs"]
[Tue Nov 25 06:31:16.954972 2025] [:error] [pid 14168:tid 14186] [client 4.233.92.206:34177] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSTctPR-ZDU0QEgAIIuFwgAAAM8"]
[Tue Nov 25 06:31:19.719183 2025] [:error] [pid 1103:tid 1130] [client 4.233.92.206:34197] [client 4.233.92.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSTct40LETdqOlq63sQP_AAAAVU"]
[Tue Nov 25 07:02:15.083880 2025] [:error] [pid 14688:tid 14693] [client 113.141.91.58:39892] [client 113.141.91.58] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSTj929vYrBoEsiDniz9pAAAAQM"]
[Tue Nov 25 11:06:50.133147 2025] [:error] [pid 14077:tid 14131] [client 104.207.56.96:47753] [client 104.207.56.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.git/HEAD"] [unique_id "aSUdShG9n7UHEkwDTyjEJgAAAFU"]
[Tue Nov 25 11:06:52.801179 2025] [:error] [pid 14168:tid 14190] [client 65.111.25.125:55355] [client 65.111.25.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.env"] [unique_id "aSUdTPR-ZDU0QEgAIIvP3AAAANM"]
[Tue Nov 25 11:06:53.857652 2025] [:error] [pid 28740:tid 28815] [client 216.26.244.118:47929] [client 216.26.244.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.svn/wc.db"] [unique_id "aSUdTVppQCoYxWW6V0X3SgAAAlg"]
[Tue Nov 25 11:40:40.643471 2025] [:error] [pid 14076:tid 14103] [client 43.130.139.136:48034] [client 43.130.139.136] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSUlOHsB4Gz6Qw-pvBtxaQAAABY"]
[Tue Nov 25 13:21:53.394811 2025] [:error] [pid 14078:tid 14161] [client 14.215.163.132:36198] [client 14.215.163.132] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aSU88dVXYbb0ii_rVoLaBwAAAJg"]
[Tue Nov 25 15:54:33.246997 2025] [:error] [pid 14077:tid 14115] [client 142.93.155.79:59725] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSVguRG9n7UHEkwDTygyRgAAAEU"]
[Tue Nov 25 15:54:35.729901 2025] [:error] [pid 14168:tid 14183] [client 142.93.155.79:59984] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSVgu_R-ZDU0QEgAIIs4pQAAAMw"]
[Tue Nov 25 17:00:34.742300 2025] [:error] [pid 28842:tid 29000] [client 142.93.155.79:56883] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSVwMtNmoaPf6T4-6C1d_AAAA0o"]
[Tue Nov 25 17:07:38.310739 2025] [:error] [pid 28739:tid 28768] [client 142.93.155.79:52631] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSVx2hxGpKmlkG4FexRY2wAAAgY"]
[Tue Nov 25 17:14:59.028496 2025] [:error] [pid 2987:tid 2996] [client 142.93.155.79:64909] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSVzk8-djEt-pTzPxnx4LgAAAUc"]
[Tue Nov 25 17:23:02.810879 2025] [:error] [pid 28842:tid 28994] [client 142.93.155.79:61023] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSV1dtNmoaPf6T4-6C1khgAAA0Q"]
[Tue Nov 25 17:31:13.448771 2025] [:error] [pid 28740:tid 28795] [client 142.93.155.79:57511] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSV3YVppQCoYxWW6V0VYwgAAAkQ"]
[Tue Nov 25 17:51:16.975985 2025] [:error] [pid 28842:tid 29005] [client 48.210.250.238:63887] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSV8FNNmoaPf6T4-6C1u4QAAA08"]
[Tue Nov 25 17:51:18.351220 2025] [:error] [pid 14078:tid 14144] [client 48.210.250.238:63974] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSV8FtVXYbb0ii_rVoImFAAAAIc"]
[Tue Nov 25 17:51:21.368634 2025] [:error] [pid 28739:tid 28763] [client 48.210.250.238:63962] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSV8GRxGpKmlkG4FexRipQAAAgE"]
[Tue Nov 25 17:51:25.374291 2025] [:error] [pid 14076:tid 14101] [client 48.210.250.238:63966] [client 48.210.250.238] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aSV8HXsB4Gz6Qw-pvBv6ggAAABQ"]
[Tue Nov 25 18:16:45.619671 2025] [:error] [pid 28740:tid 28810] [client 103.161.99.117:39617] [client 103.161.99.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.161.99.117, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSWCDVppQCoYxWW6V0VnZwAAAlM"]
[Tue Nov 25 18:52:59.150085 2025] [:error] [pid 14168:tid 14192] [client 138.199.60.187:41214] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/manager.php"] [unique_id "aSWKi_R-ZDU0QEgAIItbxwAAANU"]
[Tue Nov 25 18:52:59.427702 2025] [:error] [pid 14077:tid 14120] [client 138.199.60.187:41308] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/manager.php"] [unique_id "aSWKixG9n7UHEkwDTyh9twAAAEo"]
[Tue Nov 25 18:52:59.698719 2025] [:error] [pid 14077:tid 14134] [client 138.199.60.187:41462] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/manager.php"] [unique_id "aSWKixG9n7UHEkwDTyh9uAAAAFg"]
[Tue Nov 25 18:52:59.958448 2025] [:error] [pid 14077:tid 14124] [client 138.199.60.187:41526] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/manager.php"] [unique_id "aSWKixG9n7UHEkwDTyh9uwAAAE4"]
[Tue Nov 25 18:53:00.252489 2025] [:error] [pid 14168:tid 14186] [client 138.199.60.187:41606] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/manager.php"] [unique_id "aSWKjPR-ZDU0QEgAIItbzQAAAM8"]
[Tue Nov 25 18:53:00.471900 2025] [:error] [pid 14077:tid 14119] [client 138.199.60.187:41720] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKjBG9n7UHEkwDTyh9vgAAAEk"]
[Tue Nov 25 18:53:00.748318 2025] [:error] [pid 28609:tid 28623] [client 138.199.60.187:41848] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKjCGGdT-nZJVs3x24qAAAAYU"]
[Tue Nov 25 18:53:01.012926 2025] [:error] [pid 14077:tid 14127] [client 138.199.60.187:41908] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKjRG9n7UHEkwDTyh9wgAAAFE"]
[Tue Nov 25 18:53:01.299098 2025] [:error] [pid 14077:tid 14118] [client 138.199.60.187:42006] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKjRG9n7UHEkwDTyh9xQAAAEg"]
[Tue Nov 25 18:53:01.529043 2025] [:error] [pid 28842:tid 29018] [client 138.199.60.187:42128] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKjdNmoaPf6T4-6C2DXgAAA1E"]
[Tue Nov 25 19:59:11.166057 2025] [:error] [pid 2987:tid 2989] [client 117.33.163.216:44138] [client 117.33.163.216] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSWaD8-djEt-pTzPxnyoTQAAAUA"]
[Tue Nov 25 21:21:10.604031 2025] [:error] [pid 28609:tid 28630] [client 54.173.250.15:58946] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aSWtRiGGdT-nZJVs3x3jewAAAYw"]
[Tue Nov 25 21:41:39.598455 2025] [:error] [pid 43981:tid 43984] [client 103.161.99.117:39623] [client 103.161.99.117] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wendybinks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wendybinks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSWyEwgZn97m_qh_RaFnNAAAAwE"]
[Tue Nov 25 21:42:54.821671 2025] [:error] [pid 43843:tid 43868] [client 103.161.99.117:39788] [client 103.161.99.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.161.99.117, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSWyXhhx4v3NUNdMKDP1YQAAAdc"]
[Tue Nov 25 21:44:17.669308 2025] [:error] [pid 14168:tid 14188] [client 103.161.99.117:39886] [client 103.161.99.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.161.99.117, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSWysfR-ZDU0QEgAIIuNQgAAANE"]
[Tue Nov 25 21:45:24.714355 2025] [:error] [pid 14077:tid 14123] [client 103.161.99.117:39837] [client 103.161.99.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.161.99.117, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSWy9BG9n7UHEkwDTyjMKgAAAE0"]
[Tue Nov 25 22:18:14.626319 2025] [autoindex:error] [pid 28836:tid 29011] [client 4.206.153.235:64781] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/includes/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 22:18:18.308168 2025] [:error] [pid 28836:tid 29006] [client 4.206.153.235:64781] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/autoload_classmap.php"] [unique_id "aSW6qpwNRsoxcLQGkTf1qAAAAtA"]
[Tue Nov 25 22:18:18.726127 2025] [:error] [pid 43843:tid 43869] [client 4.206.153.235:64810] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/autoload_classmap.php"] [unique_id "aSW6qhhx4v3NUNdMKDMACgAAAdg"]
[Tue Nov 25 22:18:19.137781 2025] [:error] [pid 43843:tid 43856] [client 4.206.153.235:64783] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/autoload_classmap.php"] [unique_id "aSW6qxhx4v3NUNdMKDMADgAAAcs"]
[Tue Nov 25 22:18:19.550203 2025] [:error] [pid 28739:tid 28763] [client 4.206.153.235:64841] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/autoload_classmap.php"] [unique_id "aSW6qxxGpKmlkG4FexS7QwAAAgE"]
[Tue Nov 25 22:18:19.961479 2025] [:error] [pid 14078:tid 14159] [client 4.206.153.235:64817] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/admin.php"] [unique_id "aSW6q9VXYbb0ii_rVoKTeAAAAJY"]
[Tue Nov 25 22:18:20.378774 2025] [:error] [pid 14077:tid 14115] [client 4.206.153.235:61001] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/admin.php"] [unique_id "aSW6rBG9n7UHEkwDTyjZewAAAEU"]
[Tue Nov 25 22:18:20.809842 2025] [:error] [pid 14168:tid 14189] [client 4.206.153.235:64795] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/admin.php"] [unique_id "aSW6rPR-ZDU0QEgAIIuYeAAAANI"]
[Tue Nov 25 22:18:21.224916 2025] [:error] [pid 14168:tid 14188] [client 4.206.153.235:64812] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/admin.php"] [unique_id "aSW6rfR-ZDU0QEgAIIuYegAAANE"]
[Tue Nov 25 22:18:21.638158 2025] [:error] [pid 14076:tid 14102] [client 4.206.153.235:64822] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin.php"] [unique_id "aSW6rXsB4Gz6Qw-pvBtQQAAAABU"]
[Tue Nov 25 22:18:22.051045 2025] [:error] [pid 14076:tid 14081] [client 4.206.153.235:64883] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin.php"] [unique_id "aSW6rnsB4Gz6Qw-pvBtQQQAAAAA"]
[Tue Nov 25 22:18:22.466640 2025] [:error] [pid 43843:tid 43862] [client 4.206.153.235:61010] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin.php"] [unique_id "aSW6rhhx4v3NUNdMKDMAEQAAAdE"]
[Tue Nov 25 22:18:22.879176 2025] [:error] [pid 2987:tid 2993] [client 4.206.153.235:64891] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin.php"] [unique_id "aSW6rs-djEt-pTzPxnzX1wAAAUQ"]
[Tue Nov 25 22:18:23.290496 2025] [:error] [pid 14078:tid 14150] [client 4.206.153.235:64832] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/"] [unique_id "aSW6r9VXYbb0ii_rVoKTegAAAI0"]
[Tue Nov 25 22:18:23.702030 2025] [:error] [pid 14168:tid 14177] [client 4.206.153.235:61047] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/"] [unique_id "aSW6r_R-ZDU0QEgAIIuYfAAAAMY"]
[Tue Nov 25 22:18:24.112914 2025] [:error] [pid 14168:tid 14194] [client 4.206.153.235:61012] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/"] [unique_id "aSW6sPR-ZDU0QEgAIIuYfQAAANc"]
[Tue Nov 25 22:18:24.524349 2025] [:error] [pid 2987:tid 3001] [client 4.206.153.235:64774] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/network/"] [unique_id "aSW6sM-djEt-pTzPxnzX3AAAAUw"]
[Tue Nov 25 22:18:24.937315 2025] [:error] [pid 43843:tid 43858] [client 4.206.153.235:64870] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aSW6sBhx4v3NUNdMKDMAFAAAAc0"]
[Tue Nov 25 22:18:25.349255 2025] [:error] [pid 14076:tid 14101] [client 4.206.153.235:64776] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aSW6sXsB4Gz6Qw-pvBtQRQAAABQ"]
[Tue Nov 25 22:18:25.760315 2025] [:error] [pid 43981:tid 43997] [client 4.206.153.235:64893] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aSW6sQgZn97m_qh_RaF0HgAAAw4"]
[Tue Nov 25 22:18:26.170948 2025] [:error] [pid 43843:tid 43857] [client 4.206.153.235:64823] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/modern/"] [unique_id "aSW6shhx4v3NUNdMKDMAGQAAAcw"]
[Tue Nov 25 22:18:26.581564 2025] [:error] [pid 28836:tid 29013] [client 4.206.153.235:64874] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSW6spwNRsoxcLQGkTf1sAAAAtc"]
[Tue Nov 25 22:18:26.995397 2025] [:error] [pid 28609:tid 28627] [client 4.206.153.235:64859] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aSW6siGGdT-nZJVs3x37jgAAAYk"]
[Tue Nov 25 22:18:27.406234 2025] [:error] [pid 14077:tid 14115] [client 4.206.153.235:64811] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aSW6sxG9n7UHEkwDTyjZhAAAAEU"]
[Tue Nov 25 22:18:27.817527 2025] [:error] [pid 43843:tid 43848] [client 4.206.153.235:61016] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/"] [unique_id "aSW6sxhx4v3NUNdMKDMAHQAAAcM"]
[Tue Nov 25 22:18:28.230090 2025] [:error] [pid 43981:tid 43990] [client 4.206.153.235:64848] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aSW6tAgZn97m_qh_RaF0JQAAAwc"]
[Tue Nov 25 22:18:28.642091 2025] [:error] [pid 43981:tid 43991] [client 4.206.153.235:64775] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aSW6tAgZn97m_qh_RaF0JwAAAwg"]
[Tue Nov 25 22:18:29.054117 2025] [:error] [pid 14077:tid 14131] [client 4.206.153.235:64888] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aSW6tRG9n7UHEkwDTyjZigAAAFU"]
[Tue Nov 25 22:18:29.466826 2025] [:error] [pid 43981:tid 43988] [client 4.206.153.235:61046] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aSW6tQgZn97m_qh_RaF0KAAAAwU"]
[Tue Nov 25 22:18:29.881245 2025] [:error] [pid 14076:tid 14105] [client 4.206.153.235:60993] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSW6tXsB4Gz6Qw-pvBtQSwAAABg"]
[Tue Nov 25 22:18:33.170989 2025] [:error] [pid 14077:tid 14134] [client 4.206.153.235:64793] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/edit.php"] [unique_id "aSW6uRG9n7UHEkwDTyjZkwAAAFg"]
[Tue Nov 25 22:18:33.584126 2025] [:error] [pid 14077:tid 14124] [client 4.206.153.235:64839] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/edit.php"] [unique_id "aSW6uRG9n7UHEkwDTyjZlAAAAE4"]
[Tue Nov 25 22:18:33.996752 2025] [:error] [pid 43981:tid 44000] [client 4.206.153.235:64838] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/edit.php"] [unique_id "aSW6uQgZn97m_qh_RaF0MgAAAxE"]
[Tue Nov 25 22:18:34.411216 2025] [:error] [pid 14077:tid 14112] [client 4.206.153.235:60968] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSW6uhG9n7UHEkwDTyjZlgAAAEI"]
[Tue Nov 25 22:18:34.825270 2025] [:error] [pid 28739:tid 28765] [client 4.206.153.235:60998] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSW6uhxGpKmlkG4FexS7VwAAAgM"]
[Tue Nov 25 22:18:35.239206 2025] [:error] [pid 43843:tid 43854] [client 4.206.153.235:64821] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSW6uxhx4v3NUNdMKDMAKgAAAck"]
[Tue Nov 25 22:18:35.653634 2025] [:error] [pid 14076:tid 14088] [client 4.206.153.235:64846] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSW6u3sB4Gz6Qw-pvBtQUQAAAAc"]
[Tue Nov 25 22:18:36.072855 2025] [:error] [pid 14076:tid 14091] [client 4.206.153.235:60996] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSW6vHsB4Gz6Qw-pvBtQVQAAAAo"]
[Tue Nov 25 22:18:36.485428 2025] [:error] [pid 43981:tid 43990] [client 4.206.153.235:64788] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSW6vAgZn97m_qh_RaF0NgAAAwc"]
[Tue Nov 25 22:18:36.898784 2025] [:error] [pid 43843:tid 43846] [client 4.206.153.235:64829] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSW6vBhx4v3NUNdMKDMALQAAAcE"]
[Tue Nov 25 22:18:37.312963 2025] [:error] [pid 43981:tid 43996] [client 4.206.153.235:64884] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/blue/atomlib.php"] [unique_id "aSW6vQgZn97m_qh_RaF0OAAAAw0"]
[Tue Nov 25 22:18:37.726848 2025] [:error] [pid 43981:tid 43988] [client 4.206.153.235:64843] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/index.php"] [unique_id "aSW6vQgZn97m_qh_RaF0OQAAAwU"]
[Tue Nov 25 22:18:38.141227 2025] [:error] [pid 14077:tid 14132] [client 4.206.153.235:64828] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/index.php"] [unique_id "aSW6vhG9n7UHEkwDTyjZmAAAAFY"]
[Tue Nov 25 22:18:38.554610 2025] [:error] [pid 28609:tid 28624] [client 4.206.153.235:64773] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/index.php"] [unique_id "aSW6viGGdT-nZJVs3x37mQAAAYY"]
[Tue Nov 25 22:18:38.976845 2025] [:error] [pid 28739:tid 28784] [client 4.206.153.235:64869] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/index.php"] [unique_id "aSW6vhxGpKmlkG4FexS7XgAAAhY"]
[Tue Nov 25 22:18:39.389144 2025] [:error] [pid 28739:tid 28773] [client 4.206.153.235:61009] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/uploads/"] [unique_id "aSW6vxxGpKmlkG4FexS7YAAAAgs"]
[Tue Nov 25 22:18:39.801140 2025] [:error] [pid 28739:tid 28770] [client 4.206.153.235:60946] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/uploads/"] [unique_id "aSW6vxxGpKmlkG4FexS7YwAAAgg"]
[Tue Nov 25 22:18:40.211249 2025] [:error] [pid 28739:tid 28776] [client 4.206.153.235:64857] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/uploads/"] [unique_id "aSW6wBxGpKmlkG4FexS7ZQAAAg4"]
[Tue Nov 25 22:18:40.629206 2025] [:error] [pid 28609:tid 28632] [client 4.206.153.235:64852] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/uploads/"] [unique_id "aSW6wCGGdT-nZJVs3x37mwAAAY4"]
[Tue Nov 25 22:18:41.040603 2025] [:error] [pid 14078:tid 14146] [client 4.206.153.235:64863] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/flower.php"] [unique_id "aSW6wdVXYbb0ii_rVoKTkQAAAIk"]
[Tue Nov 25 22:18:41.454248 2025] [:error] [pid 14077:tid 14127] [client 4.206.153.235:64814] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/flower.php"] [unique_id "aSW6wRG9n7UHEkwDTyjZmgAAAFE"]
[Tue Nov 25 22:18:41.867795 2025] [:error] [pid 28609:tid 28634] [client 4.206.153.235:64875] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/flower.php"] [unique_id "aSW6wSGGdT-nZJVs3x37nQAAAZA"]
[Tue Nov 25 22:18:42.278621 2025] [:error] [pid 14076:tid 14095] [client 4.206.153.235:64864] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/flower.php"] [unique_id "aSW6wnsB4Gz6Qw-pvBtQagAAAA4"]
[Tue Nov 25 22:18:42.689411 2025] [:error] [pid 28739:tid 28783] [client 4.206.153.235:64818] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-error.php"] [unique_id "aSW6whxGpKmlkG4FexS7bwAAAhU"]
[Tue Nov 25 22:18:43.101916 2025] [:error] [pid 28609:tid 28640] [client 4.206.153.235:64787] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-error.php"] [unique_id "aSW6wyGGdT-nZJVs3x37owAAAZY"]
[Tue Nov 25 22:18:43.513961 2025] [:error] [pid 14078:tid 14140] [client 4.206.153.235:64834] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-error.php"] [unique_id "aSW6w9VXYbb0ii_rVoKTlAAAAIM"]
[Tue Nov 25 22:18:43.931303 2025] [:error] [pid 14076:tid 14092] [client 4.206.153.235:64845] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-error.php"] [unique_id "aSW6w3sB4Gz6Qw-pvBtQcQAAAAs"]
[Tue Nov 25 22:18:44.342468 2025] [:error] [pid 14077:tid 14120] [client 4.206.153.235:61018] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/"] [unique_id "aSW6xBG9n7UHEkwDTyjZngAAAEo"]
[Tue Nov 25 22:18:44.757084 2025] [:error] [pid 14077:tid 14113] [client 4.206.153.235:61040] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/"] [unique_id "aSW6xBG9n7UHEkwDTyjZoQAAAEM"]
[Tue Nov 25 22:18:45.170951 2025] [:error] [pid 28609:tid 28623] [client 4.206.153.235:64809] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/"] [unique_id "aSW6xSGGdT-nZJVs3x37qgAAAYU"]
[Tue Nov 25 22:18:45.582941 2025] [:error] [pid 28739:tid 28779] [client 4.206.153.235:64820] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/"] [unique_id "aSW6xRxGpKmlkG4FexS7cwAAAhE"]
[Tue Nov 25 22:18:45.999022 2025] [:error] [pid 14077:tid 14118] [client 4.206.153.235:60973] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/images/media/"] [unique_id "aSW6xRG9n7UHEkwDTyjZpAAAAEg"]
[Tue Nov 25 22:18:46.413062 2025] [:error] [pid 14076:tid 14081] [client 4.206.153.235:64785] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/images/media/"] [unique_id "aSW6xnsB4Gz6Qw-pvBtQdAAAAAA"]
[Tue Nov 25 22:18:46.825398 2025] [:error] [pid 28609:tid 28634] [client 4.206.153.235:60242] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/images/media/"] [unique_id "aSW6xiGGdT-nZJVs3x37rQAAAZA"]
[Tue Nov 25 22:18:47.235930 2025] [:error] [pid 14078:tid 14153] [client 4.206.153.235:61011] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/images/media/"] [unique_id "aSW6x9VXYbb0ii_rVoKTlwAAAJA"]
[Tue Nov 25 22:18:47.651902 2025] [:error] [pid 28609:tid 28628] [client 4.206.153.235:64827] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aSW6xyGGdT-nZJVs3x37sQAAAYo"]
[Tue Nov 25 22:18:48.072092 2025] [:error] [pid 14168:tid 14183] [client 4.206.153.235:61014] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aSW6yPR-ZDU0QEgAIIuYlQAAAMw"]
[Tue Nov 25 22:18:48.485651 2025] [:error] [pid 2987:tid 3006] [client 4.206.153.235:60976] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aSW6yM-djEt-pTzPxnzX9AAAAVE"]
[Tue Nov 25 22:18:48.913388 2025] [:error] [pid 14076:tid 14096] [client 4.206.153.235:61007] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ioxi-o.php"] [unique_id "aSW6yHsB4Gz6Qw-pvBtQeAAAAA8"]
[Tue Nov 25 22:18:49.328029 2025] [:error] [pid 14078:tid 14151] [client 4.206.153.235:64792] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/"] [unique_id "aSW6ydVXYbb0ii_rVoKTnwAAAI4"]
[Tue Nov 25 22:18:49.739848 2025] [:error] [pid 14078:tid 14146] [client 4.206.153.235:64808] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/"] [unique_id "aSW6ydVXYbb0ii_rVoKTpAAAAIk"]
[Tue Nov 25 22:18:50.151146 2025] [:error] [pid 28609:tid 28631] [client 4.206.153.235:64786] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/"] [unique_id "aSW6yiGGdT-nZJVs3x37swAAAY0"]
[Tue Nov 25 22:18:50.565001 2025] [:error] [pid 14076:tid 14082] [client 4.206.153.235:60965] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/fonts/"] [unique_id "aSW6ynsB4Gz6Qw-pvBtQeQAAAAE"]
[Tue Nov 25 22:18:50.984412 2025] [:error] [pid 14077:tid 14132] [client 4.206.153.235:64850] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp/wp-admin/includes/"] [unique_id "aSW6yhG9n7UHEkwDTyjZpwAAAFY"]
[Tue Nov 25 22:18:51.395390 2025] [:error] [pid 43843:tid 43854] [client 4.206.153.235:61003] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp/wp-admin/includes/"] [unique_id "aSW6yxhx4v3NUNdMKDMANAAAAck"]
[Tue Nov 25 22:18:51.812134 2025] [:error] [pid 28739:tid 28784] [client 4.206.153.235:60239] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp/wp-admin/includes/"] [unique_id "aSW6yxxGpKmlkG4FexS7egAAAhY"]
[Tue Nov 25 22:18:52.238331 2025] [:error] [pid 14077:tid 14131] [client 4.206.153.235:64815] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp/wp-admin/includes/"] [unique_id "aSW6zBG9n7UHEkwDTyjZqgAAAFU"]
[Tue Nov 25 22:18:52.652403 2025] [:error] [pid 14078:tid 14144] [client 4.206.153.235:61002] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/pomo/"] [unique_id "aSW6zNVXYbb0ii_rVoKTqAAAAIc"]
[Tue Nov 25 22:18:53.064725 2025] [:error] [pid 28739:tid 28773] [client 4.206.153.235:64830] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/pomo/"] [unique_id "aSW6zRxGpKmlkG4FexS7ewAAAgs"]
[Tue Nov 25 22:18:53.479182 2025] [:error] [pid 14078:tid 14138] [client 4.206.153.235:60955] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/pomo/"] [unique_id "aSW6zdVXYbb0ii_rVoKTqwAAAIE"]
[Tue Nov 25 22:18:53.890160 2025] [:error] [pid 2987:tid 2991] [client 4.206.153.235:64867] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/pomo/"] [unique_id "aSW6zc-djEt-pTzPxnzX_QAAAUI"]
[Tue Nov 25 22:18:54.317865 2025] [:error] [pid 43981:tid 44002] [client 4.206.153.235:64886] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSW6zggZn97m_qh_RaF0SQAAAxM"]
[Tue Nov 25 22:18:56.131380 2025] [:error] [pid 14076:tid 14083] [client 4.206.153.235:64794] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSW60HsB4Gz6Qw-pvBtQfgAAAAI"]
[Tue Nov 25 22:18:56.542846 2025] [:error] [pid 28836:tid 28961] [client 4.206.153.235:60999] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSW60JwNRsoxcLQGkTf1yQAAAsY"]
[Tue Nov 25 22:18:56.955102 2025] [:error] [pid 28836:tid 29012] [client 4.206.153.235:64858] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSW60JwNRsoxcLQGkTf1ygAAAtY"]
[Tue Nov 25 22:18:57.372831 2025] [:error] [pid 28836:tid 29013] [client 4.206.153.235:64881] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSW60ZwNRsoxcLQGkTf1zAAAAtc"]
[Tue Nov 25 22:18:57.785394 2025] [:error] [pid 14168:tid 14185] [client 4.206.153.235:64831] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSW60fR-ZDU0QEgAIIuYmwAAAM4"]
[Tue Nov 25 22:18:58.198945 2025] [:error] [pid 14168:tid 14195] [client 4.206.153.235:64797] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSW60vR-ZDU0QEgAIIuYnQAAANg"]
[Tue Nov 25 22:18:58.618703 2025] [:error] [pid 43981:tid 44007] [client 4.206.153.235:60937] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/templates/cassiopeia/index.php"] [unique_id "aSW60ggZn97m_qh_RaF0TgAAAxg"]
[Tue Nov 25 22:18:59.031926 2025] [:error] [pid 43981:tid 44000] [client 4.206.153.235:64879] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/"] [unique_id "aSW60wgZn97m_qh_RaF0UAAAAxE"]
[Tue Nov 25 22:18:59.443767 2025] [:error] [pid 43981:tid 43984] [client 4.206.153.235:64778] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/"] [unique_id "aSW60wgZn97m_qh_RaF0UwAAAwE"]
[Tue Nov 25 22:18:59.856124 2025] [:error] [pid 2987:tid 2995] [client 4.206.153.235:60938] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/"] [unique_id "aSW608-djEt-pTzPxnzYAQAAAUY"]
[Tue Nov 25 22:19:00.268743 2025] [:error] [pid 28609:tid 28632] [client 4.206.153.235:64851] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/"] [unique_id "aSW61CGGdT-nZJVs3x37vAAAAY4"]
[Tue Nov 25 22:19:00.680519 2025] [:error] [pid 14077:tid 14134] [client 4.206.153.235:64777] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSW61BG9n7UHEkwDTyjZtAAAAFg"]
[Tue Nov 25 22:19:01.092855 2025] [:error] [pid 14168:tid 14192] [client 4.206.153.235:64840] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSW61fR-ZDU0QEgAIIuYoQAAANU"]
[Tue Nov 25 22:19:01.505137 2025] [:error] [pid 28739:tid 28783] [client 4.206.153.235:64835] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSW61RxGpKmlkG4FexS7hwAAAhU"]
[Tue Nov 25 22:19:01.917921 2025] [:error] [pid 2987:tid 3002] [client 4.206.153.235:61019] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/css/dist/"] [unique_id "aSW61c-djEt-pTzPxnzYBAAAAU0"]
[Tue Nov 25 22:19:02.341841 2025] [:error] [pid 14078:tid 14141] [client 4.206.153.235:64837] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSW61tVXYbb0ii_rVoKTuAAAAIQ"]
[Tue Nov 25 22:19:02.754151 2025] [:error] [pid 28739:tid 28762] [client 4.206.153.235:64805] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSW61hxGpKmlkG4FexS7jgAAAgA"]
[Tue Nov 25 22:19:03.168973 2025] [:error] [pid 14077:tid 14129] [client 4.206.153.235:60961] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSW61xG9n7UHEkwDTyjZuAAAAFM"]
[Tue Nov 25 22:19:03.581720 2025] [:error] [pid 28739:tid 28780] [client 4.206.153.235:64779] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aSW61xxGpKmlkG4FexS7kQAAAhI"]
[Tue Nov 25 22:19:03.994373 2025] [:error] [pid 28836:tid 28967] [client 4.206.153.235:64770] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSW615wNRsoxcLQGkTf10QAAAsw"]
[Tue Nov 25 22:19:04.409114 2025] [:error] [pid 14078:tid 14139] [client 4.206.153.235:60224] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/about.php"] [unique_id "aSW62NVXYbb0ii_rVoKTvwAAAII"]
[Tue Nov 25 22:19:04.822889 2025] [:error] [pid 28609:tid 28620] [client 4.206.153.235:64813] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/about.php"] [unique_id "aSW62CGGdT-nZJVs3x37wQAAAYI"]
[Tue Nov 25 22:19:05.237346 2025] [:error] [pid 2987:tid 2994] [client 4.206.153.235:61053] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/about.php"] [unique_id "aSW62c-djEt-pTzPxnzYDQAAAUU"]
[Tue Nov 25 22:19:05.654361 2025] [:error] [pid 28609:tid 28639] [client 4.206.153.235:64895] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/about.php"] [unique_id "aSW62SGGdT-nZJVs3x37wgAAAZU"]
[Tue Nov 25 22:19:06.066495 2025] [:error] [pid 14076:tid 14093] [client 4.206.153.235:61049] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/admin.php"] [unique_id "aSW62nsB4Gz6Qw-pvBtQhAAAAAw"]
[Tue Nov 25 22:19:06.493391 2025] [:error] [pid 14078:tid 14147] [client 4.206.153.235:64855] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/admin.php"] [unique_id "aSW62tVXYbb0ii_rVoKTxAAAAIo"]
[Tue Nov 25 22:19:06.907346 2025] [:error] [pid 14078:tid 14137] [client 4.206.153.235:64861] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/admin.php"] [unique_id "aSW62tVXYbb0ii_rVoKTxQAAAIA"]
[Tue Nov 25 22:19:07.320407 2025] [:error] [pid 14077:tid 14128] [client 4.206.153.235:61017] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/admin.php"] [unique_id "aSW62xG9n7UHEkwDTyjZvwAAAFI"]
[Tue Nov 25 22:19:07.735240 2025] [:error] [pid 14078:tid 14140] [client 4.206.153.235:61013] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSW629VXYbb0ii_rVoKTzgAAAIM"]
[Tue Nov 25 22:19:08.148063 2025] [:error] [pid 14076:tid 14104] [client 4.206.153.235:64824] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSW63HsB4Gz6Qw-pvBtQjAAAABc"]
[Tue Nov 25 22:19:08.566814 2025] [:error] [pid 28609:tid 28619] [client 4.206.153.235:61023] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSW63CGGdT-nZJVs3x37xAAAAYE"]
[Tue Nov 25 22:19:08.979870 2025] [:error] [pid 14076:tid 14091] [client 4.206.153.235:64894] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/langs/"] [unique_id "aSW63HsB4Gz6Qw-pvBtQjgAAAAo"]
[Tue Nov 25 22:19:09.392344 2025] [:error] [pid 28609:tid 28632] [client 4.206.153.235:64825] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/templates/beez3/error.php"] [unique_id "aSW63SGGdT-nZJVs3x37xwAAAY4"]
[Tue Nov 25 22:19:09.804845 2025] [:error] [pid 14076:tid 14092] [client 4.206.153.235:60964] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/templates/beez3/error.php"] [unique_id "aSW63XsB4Gz6Qw-pvBtQlAAAAAs"]
[Tue Nov 25 22:19:10.218538 2025] [:error] [pid 28609:tid 28627] [client 4.206.153.235:64882] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/templates/beez3/error.php"] [unique_id "aSW63iGGdT-nZJVs3x37yQAAAYk"]
[Tue Nov 25 22:19:10.634394 2025] [:error] [pid 14077:tid 14112] [client 4.206.153.235:61035] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/templates/beez3/error.php"] [unique_id "aSW63hG9n7UHEkwDTyjZxAAAAEI"]
[Tue Nov 25 22:19:11.047912 2025] [:error] [pid 14168:tid 14180] [client 4.206.153.235:64871] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/goods.php"] [unique_id "aSW63_R-ZDU0QEgAIIuYowAAAMk"]
[Tue Nov 25 22:19:11.462326 2025] [:error] [pid 14078:tid 14151] [client 4.206.153.235:61036] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/goods.php"] [unique_id "aSW639VXYbb0ii_rVoKT4gAAAI4"]
[Tue Nov 25 22:19:11.883187 2025] [:error] [pid 14078:tid 14137] [client 4.206.153.235:61044] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/goods.php"] [unique_id "aSW639VXYbb0ii_rVoKT5QAAAIA"]
[Tue Nov 25 22:19:12.295940 2025] [:error] [pid 14076:tid 14095] [client 4.206.153.235:61026] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/goods.php"] [unique_id "aSW64HsB4Gz6Qw-pvBtQlwAAAA4"]
[Tue Nov 25 22:19:12.710558 2025] [:error] [pid 28836:tid 29013] [client 4.206.153.235:60250] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSW64JwNRsoxcLQGkTf14wAAAtc"]
[Tue Nov 25 22:19:13.124320 2025] [:error] [pid 43981:tid 43996] [client 4.206.153.235:60966] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSW64QgZn97m_qh_RaF0XwAAAw0"]
[Tue Nov 25 22:19:13.540057 2025] [:error] [pid 14168:tid 14173] [client 4.206.153.235:60980] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSW64fR-ZDU0QEgAIIuYqgAAAMI"]
[Tue Nov 25 22:19:13.951742 2025] [:error] [pid 14078:tid 14153] [client 4.206.153.235:60252] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSW64dVXYbb0ii_rVoKT6AAAAJA"]
[Tue Nov 25 22:19:14.363889 2025] [:error] [pid 28836:tid 29009] [client 4.206.153.235:64771] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/midnight/"] [unique_id "aSW64pwNRsoxcLQGkTf15gAAAtM"]
[Tue Nov 25 22:19:14.774434 2025] [:error] [pid 43981:tid 43983] [client 4.206.153.235:61000] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/1.php"] [unique_id "aSW64ggZn97m_qh_RaF0cwAAAwA"]
[Tue Nov 25 22:19:15.185005 2025] [:error] [pid 14078:tid 14143] [client 4.206.153.235:60233] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/1.php"] [unique_id "aSW649VXYbb0ii_rVoKT6wAAAIY"]
[Tue Nov 25 22:19:15.597169 2025] [:error] [pid 28836:tid 29010] [client 4.206.153.235:60255] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/1.php"] [unique_id "aSW645wNRsoxcLQGkTf16wAAAtQ"]
[Tue Nov 25 22:19:16.009645 2025] [:error] [pid 2987:tid 3011] [client 4.206.153.235:64769] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/1.php"] [unique_id "aSW65M-djEt-pTzPxnzYHQAAAVY"]
[Tue Nov 25 22:19:16.424051 2025] [:error] [pid 43981:tid 43995] [client 4.206.153.235:64892] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aSW65AgZn97m_qh_RaF0egAAAww"]
[Tue Nov 25 22:19:16.839223 2025] [:error] [pid 43981:tid 44002] [client 4.206.153.235:64772] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/widgets/cloud.php"] [unique_id "aSW65AgZn97m_qh_RaF0ewAAAxM"]
[Tue Nov 25 22:19:28.068157 2025] [autoindex:error] [pid 2987:tid 2990] [client 4.206.153.235:64816] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 22:19:31.762652 2025] [:error] [pid 2987:tid 3007] [client 4.206.153.235:64816] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/"] [unique_id "aSW688-djEt-pTzPxnzYSwAAAVI"]
[Tue Nov 25 22:19:32.174000 2025] [:error] [pid 14077:tid 14116] [client 4.206.153.235:64826] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/"] [unique_id "aSW69BG9n7UHEkwDTyjZ7wAAAEY"]
[Tue Nov 25 22:19:32.585375 2025] [:error] [pid 14077:tid 14115] [client 4.206.153.235:60243] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/"] [unique_id "aSW69BG9n7UHEkwDTyjZ8QAAAEU"]
[Tue Nov 25 22:19:32.996186 2025] [:error] [pid 14076:tid 14093] [client 4.206.153.235:60247] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/"] [unique_id "aSW69HsB4Gz6Qw-pvBtQwAAAAAw"]
[Tue Nov 25 22:19:33.410812 2025] [:error] [pid 14168:tid 14179] [client 4.206.153.235:60264] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSW69fR-ZDU0QEgAIIuYwgAAAMg"]
[Tue Nov 25 22:19:33.824081 2025] [:error] [pid 28739:tid 28762] [client 4.206.153.235:60995] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSW69RxGpKmlkG4FexS70wAAAgA"]
[Tue Nov 25 22:19:34.236851 2025] [:error] [pid 14078:tid 14141] [client 4.206.153.235:61038] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSW69tVXYbb0ii_rVoKUEgAAAIQ"]
[Tue Nov 25 22:19:34.649113 2025] [:error] [pid 28739:tid 28769] [client 4.206.153.235:61006] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/includes/cloud.php"] [unique_id "aSW69hxGpKmlkG4FexS71gAAAgc"]
[Tue Nov 25 22:19:35.061073 2025] [:error] [pid 14076:tid 14083] [client 4.206.153.235:60160] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/"] [unique_id "aSW693sB4Gz6Qw-pvBtQxAAAAAI"]
[Tue Nov 25 22:19:35.475519 2025] [:error] [pid 14076:tid 14088] [client 4.206.153.235:60165] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/"] [unique_id "aSW693sB4Gz6Qw-pvBtQxgAAAAc"]
[Tue Nov 25 22:19:35.888888 2025] [:error] [pid 28609:tid 28636] [client 4.206.153.235:64865] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/"] [unique_id "aSW69yGGdT-nZJVs3x378wAAAZI"]
[Tue Nov 25 22:19:36.302087 2025] [:error] [pid 28739:tid 28780] [client 4.206.153.235:60985] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/"] [unique_id "aSW6-BxGpKmlkG4FexS71wAAAhI"]
[Tue Nov 25 22:19:36.714350 2025] [:error] [pid 14168:tid 14190] [client 4.206.153.235:64889] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/"] [unique_id "aSW6-PR-ZDU0QEgAIIuYxgAAANM"]
[Tue Nov 25 22:19:37.125256 2025] [:error] [pid 28609:tid 28621] [client 4.206.153.235:60954] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/"] [unique_id "aSW6-SGGdT-nZJVs3x379wAAAYM"]
[Tue Nov 25 22:19:37.536882 2025] [:error] [pid 28836:tid 28958] [client 4.206.153.235:64836] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/"] [unique_id "aSW6-ZwNRsoxcLQGkTf1-wAAAsM"]
[Tue Nov 25 22:19:37.948818 2025] [:error] [pid 14168:tid 14174] [client 4.206.153.235:64780] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/certificates/"] [unique_id "aSW6-fR-ZDU0QEgAIIuYxwAAAMM"]
[Tue Nov 25 22:19:38.360410 2025] [:error] [pid 2987:tid 3008] [client 4.206.153.235:61052] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSW6-s-djEt-pTzPxnzYTwAAAVM"]
[Tue Nov 25 22:19:38.772132 2025] [:error] [pid 28609:tid 28634] [client 4.206.153.235:64806] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSW6-iGGdT-nZJVs3x37-QAAAZA"]
[Tue Nov 25 22:19:39.184432 2025] [:error] [pid 2987:tid 3006] [client 4.206.153.235:64801] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSW6-8-djEt-pTzPxnzYUAAAAVE"]
[Tue Nov 25 22:19:39.598092 2025] [:error] [pid 28836:tid 28962] [client 4.206.153.235:60199] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/Text/"] [unique_id "aSW6-5wNRsoxcLQGkTf1_QAAAsc"]
[Tue Nov 25 22:19:40.014068 2025] [:error] [pid 14078:tid 14159] [client 4.206.153.235:64807] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/function.php"] [unique_id "aSW6_NVXYbb0ii_rVoKUGgAAAJY"]
[Tue Nov 25 22:19:40.426900 2025] [:error] [pid 28609:tid 28628] [client 4.206.153.235:61043] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/function.php"] [unique_id "aSW6_CGGdT-nZJVs3x37_AAAAYo"]
[Tue Nov 25 22:19:40.841254 2025] [:error] [pid 43981:tid 44003] [client 4.206.153.235:60929] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/function.php"] [unique_id "aSW6_AgZn97m_qh_RaF0iAAAAxQ"]
[Tue Nov 25 22:19:41.252988 2025] [:error] [pid 2987:tid 2989] [client 4.206.153.235:60935] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/function.php"] [unique_id "aSW6_c-djEt-pTzPxnzYUwAAAUA"]
[Tue Nov 25 22:19:41.664425 2025] [:error] [pid 43981:tid 43988] [client 4.206.153.235:60174] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/"] [unique_id "aSW6_QgZn97m_qh_RaF0iwAAAwU"]
[Tue Nov 25 22:19:42.087204 2025] [:error] [pid 14077:tid 14131] [client 4.206.153.235:61054] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/"] [unique_id "aSW6_hG9n7UHEkwDTyjZ9gAAAFU"]
[Tue Nov 25 22:19:42.499048 2025] [:error] [pid 28836:tid 29010] [client 4.206.153.235:60258] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/"] [unique_id "aSW6_pwNRsoxcLQGkTf2AAAAAtQ"]
[Tue Nov 25 22:19:42.909613 2025] [:error] [pid 28739:tid 28776] [client 4.206.153.235:61028] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/"] [unique_id "aSW6_hxGpKmlkG4FexS74AAAAg4"]
[Tue Nov 25 22:19:43.321233 2025] [:error] [pid 14077:tid 14124] [client 4.206.153.235:60259] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/aa.php"] [unique_id "aSW6_xG9n7UHEkwDTyjZ-gAAAE4"]
[Tue Nov 25 22:19:43.734608 2025] [:error] [pid 43981:tid 43986] [client 4.206.153.235:60951] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/aa.php"] [unique_id "aSW6_wgZn97m_qh_RaF0jgAAAwM"]
[Tue Nov 25 22:19:44.150428 2025] [:error] [pid 28609:tid 28627] [client 4.206.153.235:60932] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/aa.php"] [unique_id "aSW7ACGGdT-nZJVs3x38BQAAAYk"]
[Tue Nov 25 22:19:44.564689 2025] [:error] [pid 28609:tid 28634] [client 4.206.153.235:61004] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/aa.php"] [unique_id "aSW7ACGGdT-nZJVs3x38CQAAAZA"]
[Tue Nov 25 22:19:44.980085 2025] [:error] [pid 14077:tid 14116] [client 4.206.153.235:60161] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/"] [unique_id "aSW7ABG9n7UHEkwDTyjZ-wAAAEY"]
[Tue Nov 25 22:19:45.392084 2025] [:error] [pid 14077:tid 14134] [client 4.206.153.235:64791] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/"] [unique_id "aSW7ARG9n7UHEkwDTyjZ_AAAAFg"]
[Tue Nov 25 22:19:45.807999 2025] [:error] [pid 14077:tid 14118] [client 4.206.153.235:64877] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/"] [unique_id "aSW7ARG9n7UHEkwDTyjZ_QAAAEg"]
[Tue Nov 25 22:19:46.220482 2025] [:error] [pid 14077:tid 14112] [client 4.206.153.235:61025] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/"] [unique_id "aSW7AhG9n7UHEkwDTyjZ_wAAAEI"]
[Tue Nov 25 22:19:46.633973 2025] [:error] [pid 43981:tid 44007] [client 4.206.153.235:64802] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSW7AggZn97m_qh_RaF0kAAAAxg"]
[Tue Nov 25 22:19:47.045447 2025] [:error] [pid 43981:tid 43994] [client 4.206.153.235:60276] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSW7AwgZn97m_qh_RaF0kwAAAws"]
[Tue Nov 25 22:19:47.458473 2025] [:error] [pid 28836:tid 28957] [client 4.206.153.235:60218] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSW7A5wNRsoxcLQGkTf2BAAAAsI"]
[Tue Nov 25 22:19:47.874419 2025] [:error] [pid 28609:tid 28635] [client 4.206.153.235:61029] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/swfupload/"] [unique_id "aSW7AyGGdT-nZJVs3x38DQAAAZE"]
[Tue Nov 25 22:19:48.287462 2025] [:error] [pid 28609:tid 28642] [client 4.206.153.235:60241] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/file5.php"] [unique_id "aSW7BCGGdT-nZJVs3x38EAAAAZg"]
[Tue Nov 25 22:19:48.698236 2025] [:error] [pid 28739:tid 28765] [client 4.206.153.235:60253] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/file5.php"] [unique_id "aSW7BBxGpKmlkG4FexS75AAAAgM"]
[Tue Nov 25 22:19:49.114298 2025] [:error] [pid 14077:tid 14117] [client 4.206.153.235:64876] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/file5.php"] [unique_id "aSW7BRG9n7UHEkwDTyjaAgAAAEc"]
[Tue Nov 25 22:19:49.527753 2025] [:error] [pid 43981:tid 43983] [client 4.206.153.235:61048] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/file5.php"] [unique_id "aSW7BQgZn97m_qh_RaF0mQAAAwA"]
[Tue Nov 25 22:19:49.941897 2025] [:error] [pid 14078:tid 14161] [client 4.206.153.235:61008] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/"] [unique_id "aSW7BdVXYbb0ii_rVoKUJAAAAJg"]
[Tue Nov 25 22:19:50.360335 2025] [:error] [pid 14076:tid 14102] [client 4.206.153.235:64849] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/"] [unique_id "aSW7BnsB4Gz6Qw-pvBtQ0AAAABU"]
[Tue Nov 25 22:19:50.771929 2025] [:error] [pid 28739:tid 28769] [client 4.206.153.235:60220] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/"] [unique_id "aSW7BhxGpKmlkG4FexS76AAAAgc"]
[Tue Nov 25 22:19:51.182902 2025] [:error] [pid 43843:tid 43867] [client 4.206.153.235:59750] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.well-known/"] [unique_id "aSW7Bxhx4v3NUNdMKDMAWAAAAdY"]
[Tue Nov 25 22:19:51.594542 2025] [:error] [pid 2987:tid 2998] [client 4.206.153.235:64880] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSW7B8-djEt-pTzPxnzYYAAAAUk"]
[Tue Nov 25 22:19:52.007605 2025] [:error] [pid 14168:tid 14194] [client 4.206.153.235:60948] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSW7CPR-ZDU0QEgAIIuYzAAAANc"]
[Tue Nov 25 22:19:52.420370 2025] [:error] [pid 14168:tid 14177] [client 4.206.153.235:60942] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSW7CPR-ZDU0QEgAIIuYzQAAAMY"]
[Tue Nov 25 22:19:52.833175 2025] [:error] [pid 14077:tid 14114] [client 4.206.153.235:64790] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/controller/extension/extension/ultra.php"] [unique_id "aSW7CBG9n7UHEkwDTyjaAwAAAEQ"]
[Tue Nov 25 22:19:53.256247 2025] [:error] [pid 28739:tid 28764] [client 4.206.153.235:60207] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/assets/index.php"] [unique_id "aSW7CRxGpKmlkG4FexS77QAAAgI"]
[Tue Nov 25 22:19:53.668687 2025] [:error] [pid 43981:tid 43984] [client 4.206.153.235:60930] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aSW7CQgZn97m_qh_RaF0nwAAAwE"]
[Tue Nov 25 22:19:54.084221 2025] [:error] [pid 14078:tid 14154] [client 4.206.153.235:60183] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSW7CtVXYbb0ii_rVoKUJwAAAJE"]
[Tue Nov 25 22:19:54.498096 2025] [:error] [pid 14078:tid 14138] [client 4.206.153.235:61041] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSW7CtVXYbb0ii_rVoKUKgAAAIE"]
[Tue Nov 25 22:19:54.909140 2025] [:error] [pid 28739:tid 28766] [client 4.206.153.235:61050] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/index.php"] [unique_id "aSW7ChxGpKmlkG4FexS78wAAAgQ"]
[Tue Nov 25 22:19:55.325843 2025] [:error] [pid 43981:tid 44004] [client 4.206.153.235:60943] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSW7CwgZn97m_qh_RaF0owAAAxU"]
[Tue Nov 25 22:19:55.741900 2025] [:error] [pid 43843:tid 43858] [client 4.206.153.235:60987] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSW7Cxhx4v3NUNdMKDMAWwAAAc0"]
[Tue Nov 25 22:19:56.152853 2025] [:error] [pid 43981:tid 43993] [client 4.206.153.235:60257] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSW7DAgZn97m_qh_RaF0pwAAAwo"]
[Tue Nov 25 22:19:56.565308 2025] [:error] [pid 43843:tid 43860] [client 4.206.153.235:64842] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSW7DBhx4v3NUNdMKDMAXQAAAc8"]
[Tue Nov 25 22:19:56.977450 2025] [:error] [pid 14168:tid 14175] [client 4.206.153.235:60201] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/sitemaps/providers/"] [unique_id "aSW7DPR-ZDU0QEgAIIuY2AAAAMQ"]
[Tue Nov 25 22:19:57.389762 2025] [:error] [pid 43981:tid 44007] [client 4.206.153.235:60972] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/install.php"] [unique_id "aSW7DQgZn97m_qh_RaF0qgAAAxg"]
[Tue Nov 25 22:19:57.806730 2025] [:error] [pid 28739:tid 28769] [client 4.206.153.235:60967] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/install.php"] [unique_id "aSW7DRxGpKmlkG4FexS7-AAAAgc"]
[Tue Nov 25 22:19:58.220641 2025] [:error] [pid 2987:tid 3009] [client 4.206.153.235:60933] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/install.php"] [unique_id "aSW7Ds-djEt-pTzPxnzYZgAAAVQ"]
[Tue Nov 25 22:19:58.632476 2025] [:error] [pid 2987:tid 2998] [client 4.206.153.235:60269] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/install.php"] [unique_id "aSW7Ds-djEt-pTzPxnzYagAAAUk"]
[Tue Nov 25 22:19:59.046895 2025] [:error] [pid 2987:tid 3003] [client 4.206.153.235:64796] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/"] [unique_id "aSW7D8-djEt-pTzPxnzYbAAAAU4"]
[Tue Nov 25 22:19:59.460179 2025] [:error] [pid 43843:tid 43850] [client 4.206.153.235:60231] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/"] [unique_id "aSW7Dxhx4v3NUNdMKDMAYQAAAcU"]
[Tue Nov 25 22:19:59.870961 2025] [:error] [pid 43843:tid 43851] [client 4.206.153.235:61022] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/"] [unique_id "aSW7Dxhx4v3NUNdMKDMAYgAAAcY"]
[Tue Nov 25 22:20:00.283190 2025] [:error] [pid 14078:tid 14160] [client 4.206.153.235:60947] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/js/"] [unique_id "aSW7ENVXYbb0ii_rVoKUMQAAAJc"]
[Tue Nov 25 22:20:00.697378 2025] [:error] [pid 14078:tid 14141] [client 4.206.153.235:60275] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSW7ENVXYbb0ii_rVoKUMgAAAIQ"]
[Tue Nov 25 22:20:01.109169 2025] [:error] [pid 14078:tid 14147] [client 4.206.153.235:60234] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSW7EdVXYbb0ii_rVoKUNAAAAIo"]
[Tue Nov 25 22:20:01.521195 2025] [:error] [pid 28836:tid 28958] [client 4.206.153.235:60263] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSW7EZwNRsoxcLQGkTf2CQAAAsM"]
[Tue Nov 25 22:20:01.932585 2025] [:error] [pid 43843:tid 43864] [client 4.206.153.235:60267] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/blue/about.php"] [unique_id "aSW7ERhx4v3NUNdMKDMAZQAAAdM"]
[Tue Nov 25 22:20:02.345031 2025] [:error] [pid 28836:tid 28966] [client 4.206.153.235:61015] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/plugins/"] [unique_id "aSW7EpwNRsoxcLQGkTf2CgAAAss"]
[Tue Nov 25 22:20:02.761986 2025] [:error] [pid 28609:tid 28626] [client 4.206.153.235:60273] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/plugins/"] [unique_id "aSW7EiGGdT-nZJVs3x38FwAAAYg"]
[Tue Nov 25 22:20:03.175035 2025] [:error] [pid 28836:tid 28963] [client 4.206.153.235:60953] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/plugins/"] [unique_id "aSW7E5wNRsoxcLQGkTf2DQAAAsg"]
[Tue Nov 25 22:20:03.589199 2025] [:error] [pid 14076:tid 14085] [client 4.206.153.235:64800] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/plugins/"] [unique_id "aSW7E3sB4Gz6Qw-pvBtQ2AAAAAQ"]
[Tue Nov 25 22:20:04.000761 2025] [:error] [pid 14076:tid 14096] [client 4.206.153.235:60963] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/radio.php"] [unique_id "aSW7E3sB4Gz6Qw-pvBtQ3AAAAA8"]
[Tue Nov 25 22:20:04.412613 2025] [:error] [pid 28739:tid 28765] [client 4.206.153.235:59677] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/radio.php"] [unique_id "aSW7FBxGpKmlkG4FexS7_AAAAgM"]
[Tue Nov 25 22:20:04.823396 2025] [:error] [pid 43843:tid 43854] [client 4.206.153.235:61045] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/radio.php"] [unique_id "aSW7FBhx4v3NUNdMKDMAZgAAAck"]
[Tue Nov 25 22:20:05.236027 2025] [:error] [pid 14076:tid 14100] [client 4.206.153.235:64887] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/radio.php"] [unique_id "aSW7FXsB4Gz6Qw-pvBtQ4QAAABM"]
[Tue Nov 25 22:20:05.648954 2025] [:error] [pid 28836:tid 29006] [client 4.206.153.235:60977] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/"] [unique_id "aSW7FZwNRsoxcLQGkTf2DgAAAtA"]
[Tue Nov 25 22:20:06.062528 2025] [:error] [pid 43843:tid 43856] [client 4.206.153.235:60251] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/"] [unique_id "aSW7Fhhx4v3NUNdMKDMAZwAAAcs"]
[Tue Nov 25 22:20:06.475121 2025] [:error] [pid 43981:tid 44007] [client 4.206.153.235:60254] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/"] [unique_id "aSW7FggZn97m_qh_RaF0swAAAxg"]
[Tue Nov 25 22:20:06.887610 2025] [:error] [pid 28836:tid 28969] [client 4.206.153.235:60940] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/plugins/"] [unique_id "aSW7FpwNRsoxcLQGkTf2EAAAAs4"]
[Tue Nov 25 22:20:07.303240 2025] [:error] [pid 28739:tid 28777] [client 4.206.153.235:60180] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/widgets/"] [unique_id "aSW7FxxGpKmlkG4FexS7_gAAAg8"]
[Tue Nov 25 22:20:07.714430 2025] [:error] [pid 28836:tid 28965] [client 4.206.153.235:60952] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/widgets/"] [unique_id "aSW7F5wNRsoxcLQGkTf2EQAAAso"]
[Tue Nov 25 22:20:08.124316 2025] [:error] [pid 14076:tid 14102] [client 4.206.153.235:64799] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/widgets/"] [unique_id "aSW7GHsB4Gz6Qw-pvBtQ7AAAABU"]
[Tue Nov 25 22:20:08.536612 2025] [:error] [pid 14076:tid 14082] [client 4.206.153.235:60228] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/widgets/"] [unique_id "aSW7GHsB4Gz6Qw-pvBtQ7gAAAAE"]
[Tue Nov 25 22:20:08.951215 2025] [:error] [pid 14077:tid 14121] [client 4.206.153.235:60969] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aSW7GBG9n7UHEkwDTyjaDgAAAEs"]
[Tue Nov 25 22:20:09.362285 2025] [:error] [pid 2987:tid 2991] [client 4.206.153.235:64789] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aSW7Gc-djEt-pTzPxnzYcwAAAUI"]
[Tue Nov 25 22:20:09.774600 2025] [:error] [pid 14078:tid 14140] [client 4.206.153.235:59666] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aSW7GdVXYbb0ii_rVoKUOgAAAIM"]
[Tue Nov 25 22:20:10.195686 2025] [:error] [pid 14168:tid 14179] [client 4.206.153.235:64798] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/colors/coffee/"] [unique_id "aSW7GvR-ZDU0QEgAIIuY4wAAAMg"]
[Tue Nov 25 22:20:10.606388 2025] [:error] [pid 28836:tid 28986] [client 4.206.153.235:59772] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/images/"] [unique_id "aSW7GpwNRsoxcLQGkTf2FQAAAs8"]
[Tue Nov 25 22:20:11.017175 2025] [:error] [pid 14077:tid 14130] [client 4.206.153.235:60225] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/images/"] [unique_id "aSW7GxG9n7UHEkwDTyjaEQAAAFQ"]
[Tue Nov 25 22:20:11.429153 2025] [:error] [pid 14078:tid 14160] [client 4.206.153.235:60979] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/images/"] [unique_id "aSW7G9VXYbb0ii_rVoKUPAAAAJc"]
[Tue Nov 25 22:20:11.840586 2025] [:error] [pid 14076:tid 14105] [client 4.206.153.235:60245] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/images/"] [unique_id "aSW7G3sB4Gz6Qw-pvBtQ9gAAABg"]
[Tue Nov 25 22:20:12.253918 2025] [:error] [pid 14076:tid 14081] [client 4.206.153.235:60278] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/"] [unique_id "aSW7HHsB4Gz6Qw-pvBtQ-AAAAAA"]
[Tue Nov 25 22:20:12.667484 2025] [:error] [pid 14168:tid 14194] [client 4.206.153.235:60238] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/"] [unique_id "aSW7HPR-ZDU0QEgAIIuY5gAAANc"]
[Tue Nov 25 22:20:13.081762 2025] [:error] [pid 14076:tid 14104] [client 4.206.153.235:60212] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/"] [unique_id "aSW7HXsB4Gz6Qw-pvBtQ_AAAABc"]
[Tue Nov 25 22:20:13.495695 2025] [:error] [pid 14077:tid 14122] [client 4.206.153.235:60262] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/cgi-bin/"] [unique_id "aSW7HRG9n7UHEkwDTyjaEwAAAEw"]
[Tue Nov 25 22:20:13.910912 2025] [:error] [pid 14077:tid 14119] [client 4.206.153.235:60227] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aSW7HRG9n7UHEkwDTyjaFQAAAEk"]
[Tue Nov 25 22:20:14.322742 2025] [:error] [pid 43843:tid 43868] [client 4.206.153.235:60265] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aSW7Hhhx4v3NUNdMKDMAawAAAdc"]
[Tue Nov 25 22:20:14.734855 2025] [:error] [pid 43843:tid 43859] [client 4.206.153.235:60181] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aSW7Hhhx4v3NUNdMKDMAbgAAAc4"]
[Tue Nov 25 22:20:15.146113 2025] [:error] [pid 28739:tid 28774] [client 4.206.153.235:60936] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aSW7HxxGpKmlkG4FexS8CgAAAgw"]
[Tue Nov 25 22:20:15.557376 2025] [:error] [pid 14077:tid 14110] [client 4.206.153.235:60162] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/"] [unique_id "aSW7HxG9n7UHEkwDTyjaGQAAAEA"]
[Tue Nov 25 22:20:15.982437 2025] [:error] [pid 14168:tid 14175] [client 4.206.153.235:60229] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/"] [unique_id "aSW7H_R-ZDU0QEgAIIuY7wAAAMQ"]
[Tue Nov 25 22:20:16.394734 2025] [:error] [pid 14168:tid 14187] [client 4.206.153.235:60192] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/"] [unique_id "aSW7IPR-ZDU0QEgAIIuY8QAAANA"]
[Tue Nov 25 22:20:16.808250 2025] [:error] [pid 28739:tid 28784] [client 4.206.153.235:61055] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/"] [unique_id "aSW7IBxGpKmlkG4FexS8DQAAAhY"]
[Tue Nov 25 22:20:17.221881 2025] [:error] [pid 43843:tid 43851] [client 4.206.153.235:61051] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aSW7IRhx4v3NUNdMKDMAcAAAAcY"]
[Tue Nov 25 22:20:17.634901 2025] [:error] [pid 28739:tid 28768] [client 4.206.153.235:61030] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aSW7IRxGpKmlkG4FexS8EAAAAgY"]
[Tue Nov 25 22:20:18.054048 2025] [:error] [pid 2987:tid 2999] [client 4.206.153.235:60261] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aSW7Is-djEt-pTzPxnzYfAAAAUo"]
[Tue Nov 25 22:20:18.467240 2025] [:error] [pid 28739:tid 28781] [client 4.206.153.235:61031] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/upgrade-temp-backup/about.php"] [unique_id "aSW7IhxGpKmlkG4FexS8EwAAAhM"]
[Tue Nov 25 22:20:18.880196 2025] [:error] [pid 14077:tid 14121] [client 4.206.153.235:61027] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSW7IhG9n7UHEkwDTyjaGwAAAEs"]
[Tue Nov 25 22:20:19.298989 2025] [:error] [pid 14168:tid 14194] [client 4.206.153.235:61024] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSW7I_R-ZDU0QEgAIIuY9AAAANc"]
[Tue Nov 25 22:20:19.712528 2025] [:error] [pid 14076:tid 14084] [client 4.206.153.235:59744] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSW7I3sB4Gz6Qw-pvBtRAwAAAAM"]
[Tue Nov 25 22:20:20.126443 2025] [:error] [pid 14076:tid 14102] [client 4.206.153.235:60256] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aSW7JHsB4Gz6Qw-pvBtRBAAAABU"]
[Tue Nov 25 22:20:20.541985 2025] [:error] [pid 14078:tid 14151] [client 4.206.153.235:60186] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSW7JNVXYbb0ii_rVoKURwAAAI4"]
[Tue Nov 25 22:20:20.959324 2025] [:error] [pid 14168:tid 14171] [client 4.206.153.235:60992] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSW7JPR-ZDU0QEgAIIuY-QAAAMA"]
[Tue Nov 25 22:20:21.380574 2025] [:error] [pid 28609:tid 28638] [client 4.206.153.235:59739] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSW7JSGGdT-nZJVs3x38KgAAAZQ"]
[Tue Nov 25 22:20:21.793484 2025] [:error] [pid 28739:tid 28782] [client 4.206.153.235:60208] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/languages/chosen.php"] [unique_id "aSW7JRxGpKmlkG4FexS8GAAAAhQ"]
[Tue Nov 25 22:20:22.211792 2025] [:error] [pid 14078:tid 14161] [client 4.206.153.235:61032] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/images/class-config.php"] [unique_id "aSW7JtVXYbb0ii_rVoKUSwAAAJg"]
[Tue Nov 25 22:20:22.630739 2025] [:error] [pid 14076:tid 14096] [client 4.206.153.235:64853] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/images/class-config.php"] [unique_id "aSW7JnsB4Gz6Qw-pvBtRCgAAAA8"]
[Tue Nov 25 22:20:23.046503 2025] [:error] [pid 43843:tid 43847] [client 4.206.153.235:60974] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/images/class-config.php"] [unique_id "aSW7Jxhx4v3NUNdMKDMAcwAAAcI"]
[Tue Nov 25 22:20:23.468637 2025] [:error] [pid 28609:tid 28622] [client 4.206.153.235:60237] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/images/class-config.php"] [unique_id "aSW7JyGGdT-nZJVs3x38LwAAAYQ"]
[Tue Nov 25 22:20:23.883429 2025] [:error] [pid 28836:tid 28964] [client 4.206.153.235:59716] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSW7J5wNRsoxcLQGkTf2HgAAAsk"]
[Tue Nov 25 22:20:24.300753 2025] [:error] [pid 43981:tid 44006] [client 4.206.153.235:60193] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSW7KAgZn97m_qh_RaF0uQAAAxc"]
[Tue Nov 25 22:20:24.714613 2025] [:error] [pid 43843:tid 43848] [client 4.206.153.235:60960] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSW7KBhx4v3NUNdMKDMAdQAAAcM"]
[Tue Nov 25 22:20:25.130471 2025] [:error] [pid 28609:tid 28625] [client 4.206.153.235:60271] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSW7KSGGdT-nZJVs3x38MQAAAYc"]
[Tue Nov 25 22:20:25.542809 2025] [:error] [pid 2987:tid 3012] [client 4.206.153.235:60188] [client 4.206.153.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSW7Kc-djEt-pTzPxnzYhwAAAVc"]
[Tue Nov 25 22:20:25.961682 2025] [:error] [pid 14076:tid 14105] [client 4.206.153.235:60215] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/"] [unique_id "aSW7KXsB4Gz6Qw-pvBtREAAAABg"]
[Tue Nov 25 22:20:26.389620 2025] [:error] [pid 14077:tid 14120] [client 4.206.153.235:64866] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/"] [unique_id "aSW7KhG9n7UHEkwDTyjaHAAAAEo"]
[Tue Nov 25 22:20:26.815126 2025] [:error] [pid 14168:tid 14182] [client 4.206.153.235:60185] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/"] [unique_id "aSW7KvR-ZDU0QEgAIIuY_QAAAMs"]
[Tue Nov 25 22:20:27.261302 2025] [:error] [pid 14078:tid 14153] [client 4.206.153.235:60246] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/"] [unique_id "aSW7K9VXYbb0ii_rVoKUUAAAAJA"]
[Tue Nov 25 22:20:27.684103 2025] [:error] [pid 28739:tid 28781] [client 4.206.153.235:61020] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSW7KxxGpKmlkG4FexS8HgAAAhM"]
[Tue Nov 25 22:20:28.096437 2025] [:error] [pid 14168:tid 14179] [client 4.206.153.235:60195] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSW7LPR-ZDU0QEgAIIuY_wAAAMg"]
[Tue Nov 25 22:20:28.511288 2025] [:error] [pid 14076:tid 14096] [client 4.206.153.235:61034] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSW7LHsB4Gz6Qw-pvBtRFAAAAA8"]
[Tue Nov 25 22:20:28.923310 2025] [:error] [pid 43843:tid 43853] [client 4.206.153.235:60164] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-includes/js/tinymce/plugins/compat3x/css/"] [unique_id "aSW7LBhx4v3NUNdMKDMAeAAAAcg"]
[Tue Nov 25 22:20:29.365737 2025] [:error] [pid 14077:tid 14122] [client 4.206.153.235:61042] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSW7LRG9n7UHEkwDTyjaHgAAAEw"]
[Tue Nov 25 22:20:29.777355 2025] [:error] [pid 43843:tid 43851] [client 4.206.153.235:60981] [client 4.206.153.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSW7LRhx4v3NUNdMKDMAeQAAAcY"]
[Tue Nov 25 22:20:32.749916 2025] [autoindex:error] [pid 14076:tid 14103] [client 4.206.153.235:60983] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/upgrade/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 22:20:32.963463 2025] [autoindex:error] [pid 14076:tid 14082] [client 4.206.153.235:60983] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-content/uploads/2022/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 22:20:33.176891 2025] [autoindex:error] [pid 14076:tid 14089] [client 4.206.153.235:60983] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/js/widgets/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue Nov 25 23:14:04.094993 2025] [:error] [pid 14076:tid 14081] [client 34.83.43.135:59547] [client 34.83.43.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.83.43.135, counter = 6"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSXHvHsB4Gz6Qw-pvBthJwAAAAA"]
[Tue Nov 25 23:14:04.484516 2025] [:error] [pid 14077:tid 14133] [client 34.83.43.135:54661] [client 34.83.43.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.83.43.135, counter = 6"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSXHvBG9n7UHEkwDTyjoRAAAAFc"]
[Tue Nov 25 23:14:04.846810 2025] [:error] [pid 14077:tid 14130] [client 34.83.43.135:56056] [client 34.83.43.135] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.83.43.135, counter = 6"] [hostname "wendybinks.com"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSXHvBG9n7UHEkwDTyjoRQAAAFQ"]
[Wed Nov 26 00:00:29.718110 2025] [:error] [pid 28739:tid 28772] [client 20.251.207.231:33238] [client 20.251.207.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSXSnRxGpKmlkG4FexThegAAAgo"]
[Wed Nov 26 00:01:02.111511 2025] [:error] [pid 14078:tid 14158] [client 20.251.207.231:29528] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/13.php"] [unique_id "aSXSvtVXYbb0ii_rVoLBJAAAAJU"]
[Wed Nov 26 00:01:05.732969 2025] [:error] [pid 43843:tid 43862] [client 20.251.207.231:33977] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/13.php"] [unique_id "aSXSwRhx4v3NUNdMKDMW3QAAAdE"]
[Wed Nov 26 00:01:15.341052 2025] [:error] [pid 14077:tid 14134] [client 20.251.207.231:45695] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/13.php"] [unique_id "aSXSyxG9n7UHEkwDTyj1SAAAAFg"]
[Wed Nov 26 00:01:18.731861 2025] [:error] [pid 28836:tid 29014] [client 20.251.207.231:29071] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSXSzpwNRsoxcLQGkTcPGQAAAtg"]
[Wed Nov 26 00:01:22.354405 2025] [:error] [pid 43843:tid 43852] [client 20.251.207.231:38369] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSXS0hhx4v3NUNdMKDMW5QAAAcc"]
[Wed Nov 26 00:01:31.009738 2025] [:error] [pid 14076:tid 14103] [client 20.251.207.231:32077] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/about.php"] [unique_id "aSXS23sB4Gz6Qw-pvBtvjwAAABY"]
[Wed Nov 26 00:01:34.436950 2025] [:error] [pid 14076:tid 14081] [client 20.251.207.231:32515] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/adminer.php"] [unique_id "aSXS3nsB4Gz6Qw-pvBtvlAAAAAA"]
[Wed Nov 26 00:01:36.581099 2025] [:error] [pid 43843:tid 43856] [client 20.251.207.231:34600] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/adminer.php"] [unique_id "aSXS4Bhx4v3NUNdMKDMW8QAAAcs"]
[Wed Nov 26 00:01:54.801498 2025] [:error] [pid 14076:tid 14087] [client 20.251.207.231:34599] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSXS8nsB4Gz6Qw-pvBtvpQAAAAY"]
[Wed Nov 26 00:02:02.209004 2025] [:error] [pid 43981:tid 43987] [client 20.251.207.231:34575] [client 20.251.207.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSXS-ggZn97m_qh_RaGM_QAAAwQ"]
[Wed Nov 26 00:02:03.941723 2025] [proxy_fcgi:error] [pid 28609:tid 28640] [client 20.251.207.231:29628] AH01071: Got error 'Primary script unknown'
[Wed Nov 26 00:02:04.288862 2025] [:error] [pid 28609:tid 28630] [client 20.251.207.231:29628] [client 20.251.207.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/0.php"] [unique_id "aSXS_CGGdT-nZJVs3x0YzwAAAYw"]
[Wed Nov 26 00:02:09.009165 2025] [:error] [pid 2987:tid 3005] [client 20.251.207.231:40350] [client 20.251.207.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSXTAc-djEt-pTzPxnzyDAAAAVA"]
[Wed Nov 26 00:02:26.585590 2025] [:error] [pid 28836:tid 28958] [client 20.251.207.231:28768] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/17.php"] [unique_id "aSXTEpwNRsoxcLQGkTcPSAAAAsM"]
[Wed Nov 26 00:02:28.182895 2025] [:error] [pid 28739:tid 28775] [client 20.251.207.231:34655] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/17.php"] [unique_id "aSXTFBxGpKmlkG4FexTiCAAAAg0"]
[Wed Nov 26 00:02:40.263838 2025] [:error] [pid 28739:tid 28774] [client 20.251.207.231:40764] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/17.php"] [unique_id "aSXTIBxGpKmlkG4FexTiGAAAAgw"]
[Wed Nov 26 00:02:43.255050 2025] [:error] [pid 28836:tid 28958] [client 20.251.207.231:40758] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/0.php"] [unique_id "aSXTI5wNRsoxcLQGkTcPWQAAAsM"]
[Wed Nov 26 00:02:45.863504 2025] [:error] [pid 43981:tid 43996] [client 20.251.207.231:34666] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/0.php"] [unique_id "aSXTJQgZn97m_qh_RaGNEQAAAw0"]
[Wed Nov 26 00:02:48.815923 2025] [:error] [pid 43981:tid 44004] [client 20.251.207.231:34658] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/0.php"] [unique_id "aSXTKAgZn97m_qh_RaGNEwAAAxU"]
[Wed Nov 26 00:02:50.027605 2025] [:error] [pid 43981:tid 43999] [client 20.251.207.231:28742] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/0.php"] [unique_id "aSXTKggZn97m_qh_RaGNFQAAAxA"]
[Wed Nov 26 00:02:51.574767 2025] [:error] [pid 43981:tid 43989] [client 20.251.207.231:28738] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSXTKwgZn97m_qh_RaGNFwAAAwY"]
[Wed Nov 26 00:02:54.291784 2025] [:error] [pid 43981:tid 43994] [client 20.251.207.231:28769] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSXTLggZn97m_qh_RaGNIAAAAws"]
[Wed Nov 26 00:02:55.365031 2025] [:error] [pid 14078:tid 14149] [client 20.251.207.231:29001] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSXTL9VXYbb0ii_rVoLBuAAAAIw"]
[Wed Nov 26 00:02:58.829270 2025] [:error] [pid 14078:tid 14161] [client 20.251.207.231:40714] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSXTMtVXYbb0ii_rVoLBvgAAAJg"]
[Wed Nov 26 00:03:00.598346 2025] [:error] [pid 14078:tid 14151] [client 20.251.207.231:34638] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-configs.php"] [unique_id "aSXTNNVXYbb0ii_rVoLBwAAAAI4"]
[Wed Nov 26 00:03:01.654873 2025] [:error] [pid 28609:tid 28636] [client 20.251.207.231:28739] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-configs.php"] [unique_id "aSXTNSGGdT-nZJVs3x0Y9QAAAZI"]
[Wed Nov 26 00:03:08.502425 2025] [:error] [pid 14078:tid 14137] [client 20.251.207.231:28778] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-configs.php"] [unique_id "aSXTPNVXYbb0ii_rVoLB0gAAAIA"]
[Wed Nov 26 00:03:17.420506 2025] [:error] [pid 14078:tid 14144] [client 20.251.207.231:40749] [client 20.251.207.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSXTRdVXYbb0ii_rVoLB3AAAAIc"]
[Wed Nov 26 00:04:05.903436 2025] [autoindex:error] [pid 43981:tid 44002] [client 20.251.207.231:38313] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/maint/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Nov 26 00:04:15.511334 2025] [:error] [pid 43981:tid 43984] [client 20.251.207.231:38313] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uploads/multi.php"] [unique_id "aSXTfwgZn97m_qh_RaGNdgAAAwE"]
[Wed Nov 26 00:04:17.201618 2025] [:error] [pid 43843:tid 43860] [client 20.251.207.231:44856] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uploads/multi.php"] [unique_id "aSXTgRhx4v3NUNdMKDMXgAAAAc8"]
[Wed Nov 26 00:04:21.396339 2025] [:error] [pid 28836:tid 28967] [client 20.251.207.231:44824] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uploads/multi.php"] [unique_id "aSXThZwNRsoxcLQGkTcPlwAAAsw"]
[Wed Nov 26 00:04:24.542399 2025] [:error] [pid 43843:tid 43851] [client 20.251.207.231:34647] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/uploads/multi.php"] [unique_id "aSXTiBhx4v3NUNdMKDMXigAAAcY"]
[Wed Nov 26 00:04:26.186121 2025] [:error] [pid 14078:tid 14148] [client 20.251.207.231:32004] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/3.php"] [unique_id "aSXTitVXYbb0ii_rVoLCNwAAAIs"]
[Wed Nov 26 00:04:27.913251 2025] [:error] [pid 28739:tid 28776] [client 20.251.207.231:32003] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/3.php"] [unique_id "aSXTixxGpKmlkG4FexTiiAAAAg4"]
[Wed Nov 26 00:04:30.451707 2025] [:error] [pid 43981:tid 43984] [client 20.251.207.231:32038] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/3.php"] [unique_id "aSXTjggZn97m_qh_RaGNgAAAAwE"]
[Wed Nov 26 00:04:32.228325 2025] [:error] [pid 28739:tid 28768] [client 20.251.207.231:34646] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/3.php"] [unique_id "aSXTkBxGpKmlkG4FexTijAAAAgY"]
[Wed Nov 26 00:04:34.580066 2025] [:error] [pid 14078:tid 14140] [client 20.251.207.231:44857] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSXTktVXYbb0ii_rVoLCQwAAAIM"]
[Wed Nov 26 00:04:36.393704 2025] [:error] [pid 28739:tid 28773] [client 20.251.207.231:48944] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSXTlBxGpKmlkG4FexTilAAAAgs"]
[Wed Nov 26 00:04:38.665138 2025] [:error] [pid 43981:tid 43986] [client 20.251.207.231:29026] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSXTlggZn97m_qh_RaGNkwAAAwM"]
[Wed Nov 26 00:04:39.983131 2025] [:error] [pid 2987:tid 3009] [client 20.251.207.231:48945] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSXTl8-djEt-pTzPxnzycgAAAVQ"]
[Wed Nov 26 00:04:42.022119 2025] [:error] [pid 2987:tid 2998] [client 20.251.207.231:44851] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/sk.php"] [unique_id "aSXTms-djEt-pTzPxnzydgAAAUk"]
[Wed Nov 26 00:04:44.421640 2025] [:error] [pid 14078:tid 14156] [client 20.251.207.231:32057] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/sk.php"] [unique_id "aSXTnNVXYbb0ii_rVoLCWQAAAJM"]
[Wed Nov 26 00:04:46.272284 2025] [:error] [pid 14078:tid 14139] [client 20.251.207.231:44852] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/sk.php"] [unique_id "aSXTntVXYbb0ii_rVoLCXAAAAII"]
[Wed Nov 26 00:04:48.266036 2025] [:error] [pid 43981:tid 44000] [client 20.251.207.231:48950] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/sk.php"] [unique_id "aSXToAgZn97m_qh_RaGNlgAAAxE"]
[Wed Nov 26 00:04:52.591165 2025] [:error] [pid 14168:tid 14189] [client 20.251.207.231:44860] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-crom.php"] [unique_id "aSXTpPR-ZDU0QEgAIIuxeAAAANI"]
[Wed Nov 26 00:06:19.362416 2025] [:error] [pid 14078:tid 14144] [client 20.251.207.231:34663] [client 20.251.207.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSXT-9VXYbb0ii_rVoLCwgAAAIc"]
[Wed Nov 26 00:06:26.396645 2025] [:error] [pid 43981:tid 44001] [client 20.251.207.231:32554] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ll.php"] [unique_id "aSXUAggZn97m_qh_RaGN6gAAAxI"]
[Wed Nov 26 00:06:28.679833 2025] [:error] [pid 28739:tid 28773] [client 20.251.207.231:32549] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ll.php"] [unique_id "aSXUBBxGpKmlkG4FexTjhQAAAgs"]
[Wed Nov 26 00:06:30.743947 2025] [autoindex:error] [pid 14078:tid 14142] [client 139.59.30.253:61694] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 00:06:31.864925 2025] [:error] [pid 14078:tid 14161] [client 20.251.207.231:38963] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ll.php"] [unique_id "aSXUB9VXYbb0ii_rVoLC2wAAAJg"]
[Wed Nov 26 00:06:43.095477 2025] [:error] [pid 43981:tid 43986] [client 20.251.207.231:29658] [client 20.251.207.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/wp-class.php"] [unique_id "aSXUEwgZn97m_qh_RaGN8AAAAwM"]
[Wed Nov 26 00:06:50.029529 2025] [:error] [pid 28836:tid 28960] [client 20.251.207.231:29475] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ee.php"] [unique_id "aSXUGpwNRsoxcLQGkTcQAwAAAsU"]
[Wed Nov 26 00:06:54.889954 2025] [:error] [pid 43981:tid 44004] [client 20.251.207.231:44161] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ee.php"] [unique_id "aSXUHggZn97m_qh_RaGN_wAAAxU"]
[Wed Nov 26 00:06:57.095769 2025] [:error] [pid 28836:tid 28963] [client 20.251.207.231:40436] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ee.php"] [unique_id "aSXUIZwNRsoxcLQGkTcQFgAAAsg"]
[Wed Nov 26 00:06:58.426597 2025] [:error] [pid 28739:tid 28778] [client 20.251.207.231:28689] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ee.php"] [unique_id "aSXUIhxGpKmlkG4FexTjqQAAAhA"]
[Wed Nov 26 00:06:59.291066 2025] [:error] [pid 28739:tid 28774] [client 20.251.207.231:34022] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/product.php"] [unique_id "aSXUIxxGpKmlkG4FexTjqgAAAgw"]
[Wed Nov 26 00:07:04.355468 2025] [:error] [pid 28609:tid 28624] [client 20.251.207.231:34009] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/product.php"] [unique_id "aSXUKCGGdT-nZJVs3x0aUAAAAYY"]
[Wed Nov 26 00:07:10.554899 2025] [:error] [pid 28739:tid 28764] [client 20.251.207.231:46988] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/product.php"] [unique_id "aSXULhxGpKmlkG4FexTjtAAAAgI"]
[Wed Nov 26 00:07:12.069317 2025] [:error] [pid 14076:tid 14103] [client 20.251.207.231:42843] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-content/product.php"] [unique_id "aSXUMHsB4Gz6Qw-pvBtwxQAAABY"]
[Wed Nov 26 00:07:16.468310 2025] [:error] [pid 14168:tid 14171] [client 20.251.207.231:42847] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wi.php"] [unique_id "aSXUNPR-ZDU0QEgAIIux6gAAAMA"]
[Wed Nov 26 00:07:20.112490 2025] [:error] [pid 14077:tid 14122] [client 20.251.207.231:30871] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wi.php"] [unique_id "aSXUOBG9n7UHEkwDTyj2qgAAAEw"]
[Wed Nov 26 00:07:33.114516 2025] [:error] [pid 14078:tid 14148] [client 20.251.207.231:42813] [client 20.251.207.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSXURdVXYbb0ii_rVoLDRgAAAIs"]
[Wed Nov 26 00:07:49.986747 2025] [:error] [pid 14078:tid 14150] [client 20.251.207.231:40808] [client 20.251.207.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "wendybinks.com"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSXUVdVXYbb0ii_rVoLDfAAAAI0"]
[Wed Nov 26 00:08:08.853141 2025] [:error] [pid 43843:tid 43853] [client 20.251.207.231:44868] [client 20.251.207.231] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/assets/js/wp-config.php"] [unique_id "aSXUaBhx4v3NUNdMKDMYZgAAAcg"]
[Wed Nov 26 00:08:11.608287 2025] [:error] [pid 28739:tid 28764] [client 20.251.207.231:28801] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/Js.php"] [unique_id "aSXUaxxGpKmlkG4FexTkIgAAAgI"]
[Wed Nov 26 00:08:49.016590 2025] [:error] [pid 28836:tid 28956] [client 20.251.207.231:28967] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/menu.php"] [unique_id "aSXUkZwNRsoxcLQGkTcQfwAAAsE"]
[Wed Nov 26 00:08:50.978178 2025] [:error] [pid 14076:tid 14086] [client 20.251.207.231:40354] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/menu.php"] [unique_id "aSXUknsB4Gz6Qw-pvBtxdgAAAAU"]
[Wed Nov 26 00:08:53.418637 2025] [:error] [pid 28739:tid 28785] [client 20.251.207.231:40364] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/menu.php"] [unique_id "aSXUlRxGpKmlkG4FexTkPQAAAhc"]
[Wed Nov 26 00:08:55.783977 2025] [:error] [pid 43843:tid 43857] [client 20.251.207.231:28804] [client 20.251.207.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/menu.php"] [unique_id "aSXUlxhx4v3NUNdMKDMYowAAAcw"]
[Wed Nov 26 01:05:25.740525 2025] [:error] [pid 14078:tid 14140] [client 142.93.155.79:52705] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSXh1dVXYbb0ii_rVoLjfQAAAIM"]
[Wed Nov 26 01:24:07.238290 2025] [:error] [pid 14078:tid 14141] [client 142.93.155.79:57791] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSXmN9VXYbb0ii_rVoLpzwAAAIQ"]
[Wed Nov 26 01:42:44.401560 2025] [:error] [pid 14076:tid 14081] [client 142.93.155.79:62881] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSXqlHsB4Gz6Qw-pvBuJ5QAAAAA"]
[Wed Nov 26 02:01:24.411651 2025] [:error] [pid 28609:tid 28631] [client 142.93.155.79:51569] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSXu9CGGdT-nZJVs3x02SwAAAY0"]
[Wed Nov 26 02:20:00.095888 2025] [:error] [pid 28836:tid 29012] [client 142.93.155.79:56687] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSXzUJwNRsoxcLQGkTcrpQAAAtY"]
[Wed Nov 26 02:38:27.229932 2025] [:error] [pid 2987:tid 2990] [client 142.93.155.79:61785] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSX3o8-djEt-pTzPxnwSCQAAAUE"]
[Wed Nov 26 02:57:07.640072 2025] [:error] [pid 28836:tid 29012] [client 142.93.155.79:50509] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSX8A5wNRsoxcLQGkTcyRwAAAtY"]
[Wed Nov 26 03:15:50.266114 2025] [:error] [pid 47046:tid 47139] [client 142.93.155.79:55606] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYAZgfh86sJNKzeaMVePgAAAJg"]
[Wed Nov 26 03:34:23.313486 2025] [:error] [pid 50571:tid 50620] [client 142.93.155.79:60678] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYEv1kYVJ9i8Y-huEgm-wAAAEk"]
[Wed Nov 26 03:52:58.684604 2025] [:error] [pid 3097:tid 3118] [client 142.93.155.79:49372] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYJGuVgdOH9N9jhT55rPwAAANE"]
[Wed Nov 26 04:11:41.446042 2025] [:error] [pid 3010:tid 3028] [client 142.93.155.79:54492] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYNfUWl16-roARWvItMsQAAAA4"]
[Wed Nov 26 04:30:20.204951 2025] [:error] [pid 38796:tid 38802] [client 142.93.155.79:59550] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYR3AGcUUzaXxvjCXOaJQAAAUM"]
[Wed Nov 26 04:46:00.999777 2025] [:error] [pid 3493:tid 3519] [client 198.98.58.150:55671] [client 198.98.58.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.58.150, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYViGBUa93ugXko11NijgAAARg"]
[Wed Nov 26 04:46:04.593977 2025] [:error] [pid 3493:tid 3505] [client 198.98.58.150:55671] [client 198.98.58.150] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 198.98.58.150, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYVjGBUa93ugXko11NilAAAAQo"]
[Wed Nov 26 04:49:03.644023 2025] [:error] [pid 3493:tid 3508] [client 142.93.155.79:64638] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYWP2BUa93ugXko11NjZAAAAQ0"]
[Wed Nov 26 05:07:36.230631 2025] [:error] [pid 3010:tid 3025] [client 142.93.155.79:53357] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYamEWl16-roARWvItalgAAAAs"]
[Wed Nov 26 05:25:26.023775 2025] [:error] [pid 3097:tid 3106] [client 142.93.155.79:58449] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYexuVgdOH9N9jhT56TSgAAAMU"]
[Wed Nov 26 05:43:09.404040 2025] [:error] [pid 514:tid 550] [client 54.173.250.15:40368] [client 54.173.250.15] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.git/config"] [unique_id "aSYi7f1im2wfcIabi9_xNgAAAZM"]
[Wed Nov 26 05:44:03.478516 2025] [:error] [pid 716:tid 725] [client 142.93.155.79:63544] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYjI_k-DzbcuL5gvNyQKgAAAgU"]
[Wed Nov 26 06:02:44.941316 2025] [:error] [pid 3493:tid 3511] [client 142.93.155.79:52250] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYnhGBUa93ugXko11N7OAAAARA"]
[Wed Nov 26 06:21:25.699458 2025] [:error] [pid 38796:tid 38805] [client 142.93.155.79:57347] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYr5QGcUUzaXxvjCXPCAwAAAUY"]
[Wed Nov 26 06:40:01.606154 2025] [:error] [pid 3011:tid 3062] [client 142.93.155.79:62441] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSYwQUb0BA3GljiGlI7UcAAAAFQ"]
[Wed Nov 26 06:58:43.930774 2025] [:error] [pid 38796:tid 38821] [client 142.93.155.79:51168] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSY0owGcUUzaXxvjCXPQPAAAAVY"]
[Wed Nov 26 07:17:18.271304 2025] [:error] [pid 3493:tid 3512] [client 142.93.155.79:56238] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSY4_mBUa93ugXko11OOMQAAARE"]
[Wed Nov 26 07:35:57.984763 2025] [:error] [pid 34744:tid 34827] [client 142.93.155.79:61321] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSY9XUtgOvVbhyALkTSbUwAAAZg"]
[Wed Nov 26 07:54:34.270276 2025] [:error] [pid 34744:tid 34824] [client 142.93.155.79:50031] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZBuktgOvVbhyALkTSlagAAAZU"]
[Wed Nov 26 08:13:11.005821 2025] [:error] [pid 45901:tid 45919] [client 142.93.155.79:55105] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZGFyunQ1SpfPRNrtxMnwAAARA"]
[Wed Nov 26 08:32:03.268791 2025] [:error] [pid 35540:tid 35553] [client 142.93.155.79:60167] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZKg8GrIq2A6SZSnkIKigAAAIc"]
[Wed Nov 26 08:50:56.033620 2025] [:error] [pid 35540:tid 35559] [client 142.93.155.79:65237] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZO8MGrIq2A6SZSnkIR4AAAAI0"]
[Wed Nov 26 09:09:51.693388 2025] [:error] [pid 45836:tid 45870] [client 142.93.155.79:53942] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZTX5frnOGqL-seZAz4uwAAANg"]
[Wed Nov 26 09:28:39.353243 2025] [:error] [pid 35540:tid 35555] [client 142.93.155.79:59030] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZXx8GrIq2A6SZSnkIl-gAAAIk"]
[Wed Nov 26 09:47:32.485765 2025] [:error] [pid 45901:tid 45919] [client 142.93.155.79:64117] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZcNCunQ1SpfPRNrtxtAwAAARA"]
[Wed Nov 26 10:06:28.292416 2025] [:error] [pid 34743:tid 34793] [client 142.93.155.79:52816] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZgpAvyX7Q5oU7_mBxwuQAAAVE"]
[Wed Nov 26 10:25:11.714328 2025] [:error] [pid 35540:tid 35551] [client 142.93.155.79:57913] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZlB8GrIq2A6SZSnkI8PQAAAIU"]
[Wed Nov 26 10:43:58.126511 2025] [:error] [pid 10383:tid 10397] [client 142.93.155.79:62988] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZpbq0RJ-zjhOVjD8-Q6AAAAcs"]
[Wed Nov 26 11:02:41.219217 2025] [:error] [pid 34830:tid 34856] [client 142.93.155.79:51690] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZt0UukvkWgWN6jCR2IfgAAABg"]
[Wed Nov 26 11:21:31.239153 2025] [:error] [pid 10383:tid 10400] [client 142.93.155.79:56759] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZyO60RJ-zjhOVjD8-f0gAAAc4"]
[Wed Nov 26 11:40:24.174692 2025] [:error] [pid 10383:tid 10401] [client 142.93.155.79:61855] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZ2qK0RJ-zjhOVjD8-n5AAAAc8"]
[Wed Nov 26 11:59:24.320180 2025] [:error] [pid 45901:tid 45912] [client 142.93.155.79:50572] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZ7HCunQ1SpfPRNrtyQ9AAAAQk"]
[Wed Nov 26 12:18:22.563290 2025] [:error] [pid 34743:tid 34780] [client 142.93.155.79:55668] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSZ_jgvyX7Q5oU7_mByNLQAAAUQ"]
[Wed Nov 26 12:20:55.908082 2025] [:error] [pid 34830:tid 34852] [client 43.166.224.244:59780] [client 43.166.224.244] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSaAJ0ukvkWgWN6jCR2ZYQAAABQ"]
[Wed Nov 26 12:33:13.555103 2025] [autoindex:error] [pid 45836:tid 45846] [client 68.183.90.36:62506] AH01276: Cannot serve directory /home/stunnedemuadmin/public_html/wp-admin/css/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Nov 26 12:37:20.017099 2025] [:error] [pid 34742:tid 34758] [client 142.93.155.79:60776] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSaEAJSuLNwpQF_jzAc1rAAAAEo"]
[Wed Nov 26 12:56:17.241714 2025] [:error] [pid 10383:tid 10408] [client 142.93.155.79:49503] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSaIca0RJ-zjhOVjD8_EbAAAAdY"]
[Wed Nov 26 13:15:25.303849 2025] [:error] [pid 45836:tid 45856] [client 142.93.155.79:54618] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSaM7ZfrnOGqL-seZAw4ewAAAMo"]
[Wed Nov 26 13:34:27.676451 2025] [:error] [pid 45901:tid 45915] [client 142.93.155.79:59708] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSaRYyunQ1SpfPRNrtyn0AAAAQw"]
[Wed Nov 26 13:53:23.163001 2025] [:error] [pid 10383:tid 10395] [client 142.93.155.79:64795] [client 142.93.155.79] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.93.155.79, incrementing brute counter"] [hostname "wendybinks.com"] [uri "/wp-login.php"] [unique_id "aSaV060RJ-zjhOVjD8_TmgAAAck"]
[Wed Nov 26 13:56:36.518619 2025] [:error] [pid 10383:tid 10393] [client 139.59.30.253:60964] [client 139.59.30.253] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/wp-admin/css/"] [unique_id "aSaWlK0RJ-zjhOVjD8_UqQAAAcc"], referer: binance.com
[Wed Nov 26 14:06:28.968836 2025] [:error] [pid 34743:tid 34786] [client 43.159.135.203:58430] [client 43.159.135.203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aSaY5AvyX7Q5oU7_mBye8wAAAUo"]
[Wed Nov 26 15:11:05.666956 2025] [:error] [pid 34744:tid 34824] [client 177.96.13.66:58608] [client 177.96.13.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.96.13.66, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSaoCUtgOvVbhyALkTQeygAAAZU"]
[Wed Nov 26 16:17:53.711790 2025] [:error] [pid 45769:tid 45777] [client 146.190.103.103:42478] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/actuator/env"] [unique_id "aSa3sVdG5Eht9c3yy4PxWgAAAcU"]
[Wed Nov 26 16:17:53.976200 2025] [:error] [pid 45685:tid 45747] [client 146.190.103.103:42484] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSa3sVj3f_NRdgU0DQ6pnwAAAQU"]
[Wed Nov 26 16:17:54.240965 2025] [:error] [pid 45685:tid 45750] [client 146.190.103.103:42498] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/server"] [unique_id "aSa3slj3f_NRdgU0DQ6poAAAAQg"]
[Wed Nov 26 16:17:54.505286 2025] [:error] [pid 46443:tid 46448] [client 146.190.103.103:42514] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.vscode/sftp.json"] [unique_id "aSa3ssLmDsnHrj-QFB-dewAAAEM"]
[Wed Nov 26 16:17:54.771886 2025] [:error] [pid 45683:tid 45697] [client 146.190.103.103:42522] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/about"] [unique_id "aSa3shX1gQgNFW_222p8rgAAAUk"]
[Wed Nov 26 16:17:55.034799 2025] [:error] [pid 45769:tid 45790] [client 146.190.103.103:42534] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/debug/default/view"] [unique_id "aSa3s1dG5Eht9c3yy4PxXAAAAdI"]
[Wed Nov 26 16:17:55.301108 2025] [:error] [pid 45684:tid 45716] [client 146.190.103.103:40272] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/v2/_catalog"] [unique_id "aSa3s_g5LMxwI4-PD1cFUQAAAAE"]
[Wed Nov 26 16:17:55.566192 2025] [:error] [pid 45684:tid 45717] [client 146.190.103.103:40286] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSa3s_g5LMxwI4-PD1cFUgAAAAI"]
[Wed Nov 26 16:17:55.831024 2025] [:error] [pid 45769:tid 45787] [client 146.190.103.103:40292] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/server-status"] [unique_id "aSa3s1dG5Eht9c3yy4PxXQAAAc8"]
[Wed Nov 26 16:17:56.094994 2025] [:error] [pid 45769:tid 45795] [client 146.190.103.103:40306] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/login.action"] [unique_id "aSa3tFdG5Eht9c3yy4PxXgAAAdc"]
[Wed Nov 26 16:17:56.358712 2025] [:error] [pid 45683:tid 45707] [client 146.190.103.103:40316] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/_all_dbs"] [unique_id "aSa3tBX1gQgNFW_222p8sAAAAVM"]
[Wed Nov 26 16:17:56.624210 2025] [:error] [pid 45685:tid 45752] [client 146.190.103.103:40326] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/.DS_Store"] [unique_id "aSa3tFj3f_NRdgU0DQ6ppAAAAQo"]
[Wed Nov 26 16:17:56.887810 2025] [:error] [pid 45684:tid 45723] [client 146.190.103.103:40340] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.env"] [unique_id "aSa3tPg5LMxwI4-PD1cFVgAAAAg"]
[Wed Nov 26 16:17:57.150879 2025] [:error] [pid 45769:tid 45778] [client 146.190.103.103:40348] [client 146.190.103.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aSa3tVdG5Eht9c3yy4PxXwAAAcY"]
[Wed Nov 26 16:17:57.415215 2025] [:error] [pid 45683:tid 45704] [client 146.190.103.103:40356] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSa3tRX1gQgNFW_222p8sgAAAVA"]
[Wed Nov 26 16:17:57.679115 2025] [:error] [pid 46443:tid 46454] [client 146.190.103.103:40362] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/config.json"] [unique_id "aSa3tcLmDsnHrj-QFB-dfQAAAEk"]
[Wed Nov 26 16:17:57.942887 2025] [:error] [pid 46443:tid 46460] [client 146.190.103.103:40370] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/telescope/requests"] [unique_id "aSa3tcLmDsnHrj-QFB-dfwAAAE8"]
[Wed Nov 26 16:17:58.206643 2025] [:error] [pid 46443:tid 46451] [client 146.190.103.103:40384] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/info.php"] [unique_id "aSa3tsLmDsnHrj-QFB-dgAAAAEY"]
[Wed Nov 26 16:17:58.469994 2025] [:error] [pid 46443:tid 46469] [client 146.190.103.103:40394] [client 146.190.103.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aSa3tsLmDsnHrj-QFB-dggAAAFg"]
[Wed Nov 26 17:09:21.141167 2025] [:error] [pid 45683:tid 45699] [client 128.199.182.152:52712] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/actuator/env"] [unique_id "aSbDwRX1gQgNFW_222qLNQAAAUs"]
[Wed Nov 26 17:09:21.403988 2025] [:error] [pid 6471:tid 6483] [client 128.199.182.152:52718] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aSbDweh3Z9TZLlRuTiNngwAAAIk"]
[Wed Nov 26 17:09:21.667300 2025] [:error] [pid 6471:tid 6480] [client 128.199.182.152:52726] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/server"] [unique_id "aSbDweh3Z9TZLlRuTiNnhAAAAIY"]
[Wed Nov 26 17:09:21.929842 2025] [:error] [pid 6471:tid 6488] [client 128.199.182.152:46562] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/.vscode/sftp.json"] [unique_id "aSbDweh3Z9TZLlRuTiNnhQAAAI4"]
[Wed Nov 26 17:09:22.192450 2025] [:error] [pid 45685:tid 45759] [client 128.199.182.152:46576] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/about"] [unique_id "aSbDwlj3f_NRdgU0DQ66WAAAARE"]
[Wed Nov 26 17:09:22.457128 2025] [:error] [pid 6471:tid 6489] [client 128.199.182.152:46588] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/debug/default/view"] [unique_id "aSbDwuh3Z9TZLlRuTiNnhwAAAI8"]
[Wed Nov 26 17:09:22.721529 2025] [:error] [pid 45769:tid 45789] [client 128.199.182.152:46596] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/v2/_catalog"] [unique_id "aSbDwldG5Eht9c3yy4MDbQAAAdE"]
[Wed Nov 26 17:09:22.985110 2025] [:error] [pid 46443:tid 46456] [client 128.199.182.152:46608] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aSbDwsLmDsnHrj-QFB-10QAAAEs"]
[Wed Nov 26 17:09:23.248452 2025] [:error] [pid 46443:tid 46462] [client 128.199.182.152:46624] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/server-status"] [unique_id "aSbDw8LmDsnHrj-QFB-10gAAAFE"]
[Wed Nov 26 17:09:23.512050 2025] [:error] [pid 6471:tid 6484] [client 128.199.182.152:46626] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/login.action"] [unique_id "aSbDw-h3Z9TZLlRuTiNniQAAAIo"]
[Wed Nov 26 17:09:23.781801 2025] [:error] [pid 46443:tid 46460] [client 128.199.182.152:46632] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/_all_dbs"] [unique_id "aSbDw8LmDsnHrj-QFB-10wAAAE8"]
[Wed Nov 26 17:09:24.045980 2025] [:error] [pid 6471:tid 6478] [client 128.199.182.152:46646] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/.DS_Store"] [unique_id "aSbDxOh3Z9TZLlRuTiNniwAAAIQ"]
[Wed Nov 26 17:09:24.309398 2025] [:error] [pid 45683:tid 45703] [client 128.199.182.152:46648] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.env"] [unique_id "aSbDxBX1gQgNFW_222qLNwAAAU8"]
[Wed Nov 26 17:09:24.591743 2025] [:error] [pid 6471:tid 6481] [client 128.199.182.152:46658] [client 128.199.182.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wendybinks.com"] [uri "/.git/config"] [unique_id "aSbDxOh3Z9TZLlRuTiNnjAAAAIc"]
[Wed Nov 26 17:09:24.856518 2025] [:error] [pid 46443:tid 46469] [client 128.199.182.152:46668] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aSbDxMLmDsnHrj-QFB-11QAAAFg"]
[Wed Nov 26 17:09:25.119284 2025] [:error] [pid 46443:tid 46446] [client 128.199.182.152:46682] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/config.json"] [unique_id "aSbDxcLmDsnHrj-QFB-11gAAAEE"]
[Wed Nov 26 17:09:25.383932 2025] [:error] [pid 45685:tid 45743] [client 128.199.182.152:46692] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/telescope/requests"] [unique_id "aSbDxVj3f_NRdgU0DQ66WgAAAQE"]
[Wed Nov 26 17:09:25.658711 2025] [:error] [pid 46443:tid 46459] [client 128.199.182.152:46708] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/info.php"] [unique_id "aSbDxcLmDsnHrj-QFB-11wAAAE4"]
[Wed Nov 26 17:09:25.921530 2025] [:error] [pid 6471:tid 6492] [client 128.199.182.152:46722] [client 128.199.182.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aSbDxeh3Z9TZLlRuTiNnjgAAAJI"]
[Wed Nov 26 22:58:19.556837 2025] [:error] [pid 45685:tid 45760] [client 43.135.145.77:51892] [client 43.135.145.77] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wendybinks.com"] [uri "/"] [unique_id "aScVi1j3f_NRdgU0DQ4GSQAAARI"]
[Thu Nov 27 00:59:15.448770 2025] [:error] [pid 8184:tid 8239] [client 103.77.107.57:50724] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/sftp-config.json"] [unique_id "aScx47-M2IHkRYVrcbN9eQAAAEM"]
[Thu Nov 27 02:38:42.826998 2025] [:error] [pid 24814:tid 25080] [client 216.126.239.203:50520] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendybinks.com"] [uri "/.git/config"] [unique_id "aSdJMgPn1NMGCdo6Rsi1SQAAAUU"]
[Thu Nov 27 04:20:56.226967 2025] [:error] [pid 21017:tid 21078] [client 119.96.24.54:49992] [client 119.96.24.54] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.wendybinks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wendybinks.com"] [uri "/"] [unique_id "aSdhKKZA663ub03MMQt31gAAARM"]
[Thu Nov 27 06:55:11.699448 2025] [:error] [pid 48928:tid 48945] [client 177.96.13.66:63970] [client 177.96.13.66] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||wendybinks.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "wendybinks.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aSeFT3zpQoF8PVTquqYrhAAAAEY"]
[Thu Nov 27 06:56:28.792103 2025] [:error] [pid 49025:tid 49045] [client 177.96.13.66:60605] [client 177.96.13.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.96.13.66, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSeFnOZVTPh2XIK9-y_21AAAAVE"]
[Thu Nov 27 06:57:34.632703 2025] [:error] [pid 48929:tid 48970] [client 177.96.13.66:61114] [client 177.96.13.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.96.13.66, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSeF3hsXTHq9V_4xD5TgvwAAAIM"]
[Thu Nov 27 06:58:26.395523 2025] [:error] [pid 51021:tid 51047] [client 177.96.13.66:61464] [client 177.96.13.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.96.13.66, incrementing ddos counter"] [hostname "wendybinks.com"] [uri "/xmlrpc.php"] [unique_id "aSeGEpuE5fqOXcOLed3LTQAAABg"]
[Tue Mar 17 02:29:36.037185 2026] [ssl:error] [pid 45424:tid 45554] [client 138.199.43.82:56226] AH02032: Hostname wendybinks.com.au provided via SNI and hostname wendybinks.com provided via HTTP have no compatible SSL setup, referer: http://wendybinks.com.au/
[Thu Apr 16 01:43:29.965976 2026] [ssl:warn] [pid 4016:tid 4016] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 01:43:29.965982 2026] [ssl:warn] [pid 4016:tid 4016] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:40.565910 2026] [ssl:warn] [pid 52554:tid 52554] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:40.565950 2026] [ssl:warn] [pid 52554:tid 52554] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:29:42.541461 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:29:42.541487 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:07.603489 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:07.603515 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:22.705800 2026] [ssl:warn] [pid 52557:tid 52557] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:22.705826 2026] [ssl:warn] [pid 52557:tid 52557] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:29.666487 2026] [ssl:warn] [pid 53231:tid 53231] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:29.666512 2026] [ssl:warn] [pid 53231:tid 53231] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:30:31.752075 2026] [ssl:warn] [pid 53237:tid 53237] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:30:31.752101 2026] [ssl:warn] [pid 53237:tid 53237] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:22.368933 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:22.368950 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:41:24.368515 2026] [ssl:warn] [pid 26973:tid 26973] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:41:24.368540 2026] [ssl:warn] [pid 26973:tid 26973] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:47:58.499402 2026] [ssl:warn] [pid 57468:tid 57468] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:47:58.499429 2026] [ssl:warn] [pid 57468:tid 57468] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 16 03:48:00.542854 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 16 03:48:00.542880 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 00:03:16.354659 2026] [ssl:warn] [pid 57487:tid 57487] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 00:03:16.354697 2026] [ssl:warn] [pid 57487:tid 57487] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:40.777457 2026] [ssl:warn] [pid 5220:tid 5220] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:40.777481 2026] [ssl:warn] [pid 5220:tid 5220] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:42.848838 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:42.848875 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:21:53.062940 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:21:53.062965 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:01.951541 2026] [ssl:warn] [pid 5230:tid 5230] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:01.951564 2026] [ssl:warn] [pid 5230:tid 5230] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:12.762865 2026] [ssl:warn] [pid 5809:tid 5809] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:12.762890 2026] [ssl:warn] [pid 5809:tid 5809] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:22:14.764972 2026] [ssl:warn] [pid 5815:tid 5815] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:22:14.764996 2026] [ssl:warn] [pid 5815:tid 5815] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:45.646921 2026] [ssl:warn] [pid 43721:tid 43721] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:45.646947 2026] [ssl:warn] [pid 43721:tid 43721] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:32:47.662517 2026] [ssl:warn] [pid 43725:tid 43725] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:32:47.662543 2026] [ssl:warn] [pid 43725:tid 43725] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:46.365415 2026] [ssl:warn] [pid 9098:tid 9098] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:46.365480 2026] [ssl:warn] [pid 9098:tid 9098] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 17 03:39:48.424873 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 17 03:39:48.424897 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 00:02:17.784669 2026] [ssl:warn] [pid 9100:tid 9100] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 00:02:17.784697 2026] [ssl:warn] [pid 9100:tid 9100] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:41.212927 2026] [ssl:warn] [pid 6452:tid 6452] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:41.212953 2026] [ssl:warn] [pid 6452:tid 6452] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:43.273217 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:43.273271 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:15:55.683618 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:15:55.683643 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:04.620501 2026] [ssl:warn] [pid 6456:tid 6456] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:04.620526 2026] [ssl:warn] [pid 6456:tid 6456] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:13.410949 2026] [ssl:warn] [pid 7034:tid 7034] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:13.410987 2026] [ssl:warn] [pid 7034:tid 7034] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:16:15.420704 2026] [ssl:warn] [pid 7037:tid 7037] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:16:15.420730 2026] [ssl:warn] [pid 7037:tid 7037] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:31.360216 2026] [ssl:warn] [pid 44741:tid 44741] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:31.360281 2026] [ssl:warn] [pid 44741:tid 44741] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:26:33.363473 2026] [ssl:warn] [pid 44746:tid 44746] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:26:33.363480 2026] [ssl:warn] [pid 44746:tid 44746] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:55.592431 2026] [ssl:warn] [pid 9807:tid 9807] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:55.592456 2026] [ssl:warn] [pid 9807:tid 9807] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 18 03:32:57.614060 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 18 03:32:57.614085 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 00:02:30.853012 2026] [ssl:warn] [pid 9810:tid 9810] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 00:02:30.853039 2026] [ssl:warn] [pid 9810:tid 9810] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:49.646168 2026] [ssl:warn] [pid 39407:tid 39407] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:49.646208 2026] [ssl:warn] [pid 39407:tid 39407] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:46:51.798967 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:46:51.798993 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:07.258814 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:07.258839 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:17.168420 2026] [ssl:warn] [pid 39410:tid 39410] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:17.168445 2026] [ssl:warn] [pid 39410:tid 39410] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:28.029183 2026] [ssl:warn] [pid 40069:tid 40069] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:28.029259 2026] [ssl:warn] [pid 40069:tid 40069] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 03:47:30.096311 2026] [ssl:warn] [pid 40072:tid 40072] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 03:47:30.096319 2026] [ssl:warn] [pid 40072:tid 40072] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:07.503629 2026] [ssl:warn] [pid 17392:tid 17392] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:07.503654 2026] [ssl:warn] [pid 17392:tid 17392] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:04:09.559045 2026] [ssl:warn] [pid 17394:tid 17394] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:04:09.559069 2026] [ssl:warn] [pid 17394:tid 17394] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:44.607759 2026] [ssl:warn] [pid 47724:tid 47724] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:44.607785 2026] [ssl:warn] [pid 47724:tid 47724] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 19 04:10:46.669032 2026] [ssl:warn] [pid 47728:tid 47728] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 19 04:10:46.669057 2026] [ssl:warn] [pid 47728:tid 47728] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:51.420847 2026] [ssl:warn] [pid 61391:tid 61391] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:51.420894 2026] [ssl:warn] [pid 61391:tid 61391] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:12:54.066488 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:12:54.066514 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:10.837913 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:10.837915 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:20.228492 2026] [ssl:warn] [pid 61398:tid 61398] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:20.228517 2026] [ssl:warn] [pid 61398:tid 61398] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:29.097066 2026] [ssl:warn] [pid 62018:tid 62018] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:29.097092 2026] [ssl:warn] [pid 62018:tid 62018] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:13:31.097593 2026] [ssl:warn] [pid 62020:tid 62020] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:13:31.097629 2026] [ssl:warn] [pid 62020:tid 62020] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:13.693136 2026] [ssl:warn] [pid 34210:tid 34210] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:13.693162 2026] [ssl:warn] [pid 34210:tid 34210] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:24:15.717408 2026] [ssl:warn] [pid 34213:tid 34213] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:24:15.717435 2026] [ssl:warn] [pid 34213:tid 34213] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:48.215308 2026] [ssl:warn] [pid 64283:tid 64283] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:48.215426 2026] [ssl:warn] [pid 64283:tid 64283] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 03:30:50.287444 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 03:30:50.287479 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 20 10:09:51.766082 2026] [ssl:warn] [pid 64287:tid 64287] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 20 10:09:51.766117 2026] [ssl:warn] [pid 64287:tid 64287] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:52.777980 2026] [ssl:warn] [pid 31929:tid 31929] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:52.778007 2026] [ssl:warn] [pid 31929:tid 31929] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:16:55.338272 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:16:55.338299 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:10.531737 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:10.531762 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:20.412024 2026] [ssl:warn] [pid 31933:tid 31933] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:20.412048 2026] [ssl:warn] [pid 31933:tid 31933] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:26.352579 2026] [ssl:warn] [pid 32501:tid 32501] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:26.352605 2026] [ssl:warn] [pid 32501:tid 32501] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:17:28.452987 2026] [ssl:warn] [pid 32504:tid 32504] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:17:28.453012 2026] [ssl:warn] [pid 32504:tid 32504] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:46.653496 2026] [ssl:warn] [pid 4901:tid 4901] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:46.653530 2026] [ssl:warn] [pid 4901:tid 4901] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:28:48.719601 2026] [ssl:warn] [pid 4903:tid 4903] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:28:48.719625 2026] [ssl:warn] [pid 4903:tid 4903] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:05.056640 2026] [ssl:warn] [pid 35237:tid 35237] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:05.056668 2026] [ssl:warn] [pid 35237:tid 35237] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 21 03:36:07.195918 2026] [ssl:warn] [pid 35263:tid 35263] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 21 03:36:07.195941 2026] [ssl:warn] [pid 35263:tid 35263] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:44.870331 2026] [ssl:warn] [pid 17978:tid 17978] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:44.870359 2026] [ssl:warn] [pid 17978:tid 17978] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:06:47.546603 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:06:47.546635 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:02.791429 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:02.791456 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:12.344724 2026] [ssl:warn] [pid 17984:tid 17984] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:12.344750 2026] [ssl:warn] [pid 17984:tid 17984] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:19.252439 2026] [ssl:warn] [pid 18567:tid 18567] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:19.252465 2026] [ssl:warn] [pid 18567:tid 18567] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:07:21.343447 2026] [ssl:warn] [pid 18569:tid 18569] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:07:21.343471 2026] [ssl:warn] [pid 18569:tid 18569] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:30.693487 2026] [ssl:warn] [pid 56393:tid 56393] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:30.693513 2026] [ssl:warn] [pid 56393:tid 56393] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:19:32.781968 2026] [ssl:warn] [pid 56397:tid 56397] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:19:32.781995 2026] [ssl:warn] [pid 56397:tid 56397] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:02.880765 2026] [ssl:warn] [pid 21632:tid 21632] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:02.880791 2026] [ssl:warn] [pid 21632:tid 21632] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 03:26:04.949787 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 03:26:04.949827 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 22 13:25:48.277655 2026] [ssl:warn] [pid 21637:tid 21637] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 22 13:25:48.277683 2026] [ssl:warn] [pid 21637:tid 21637] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:43.901294 2026] [ssl:warn] [pid 39499:tid 39499] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:43.901322 2026] [ssl:warn] [pid 39499:tid 39499] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:10:46.288994 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:10:46.289019 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:03.633710 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:03.633734 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:12.938388 2026] [ssl:warn] [pid 39521:tid 39521] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:12.938403 2026] [ssl:warn] [pid 39521:tid 39521] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:26.947850 2026] [ssl:warn] [pid 40150:tid 40150] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:26.947874 2026] [ssl:warn] [pid 40150:tid 40150] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:11:28.983379 2026] [ssl:warn] [pid 40153:tid 40153] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:11:28.983407 2026] [ssl:warn] [pid 40153:tid 40153] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:41.410887 2026] [ssl:warn] [pid 12710:tid 12710] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:41.410914 2026] [ssl:warn] [pid 12710:tid 12710] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:22:43.454408 2026] [ssl:warn] [pid 12712:tid 12712] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:22:43.454434 2026] [ssl:warn] [pid 12712:tid 12712] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:19.283866 2026] [ssl:warn] [pid 42921:tid 42921] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:19.283890 2026] [ssl:warn] [pid 42921:tid 42921] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 23 03:29:21.269738 2026] [ssl:warn] [pid 42923:tid 42923] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 23 03:29:21.269774 2026] [ssl:warn] [pid 42923:tid 42923] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:44.535445 2026] [ssl:warn] [pid 14987:tid 14987] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:44.535490 2026] [ssl:warn] [pid 14987:tid 14987] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:47.149754 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:47.149788 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:34:59.237090 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:34:59.237116 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:09.015651 2026] [ssl:warn] [pid 14992:tid 14992] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:09.015675 2026] [ssl:warn] [pid 14992:tid 14992] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:14.993504 2026] [ssl:warn] [pid 15609:tid 15609] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:14.993529 2026] [ssl:warn] [pid 15609:tid 15609] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:35:17.056861 2026] [ssl:warn] [pid 15624:tid 15624] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:35:17.056884 2026] [ssl:warn] [pid 15624:tid 15624] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:36.392588 2026] [ssl:warn] [pid 53619:tid 53619] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:36.392614 2026] [ssl:warn] [pid 53619:tid 53619] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:47:38.501559 2026] [ssl:warn] [pid 53622:tid 53622] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:47:38.501584 2026] [ssl:warn] [pid 53622:tid 53622] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:33.719481 2026] [ssl:warn] [pid 19045:tid 19045] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:33.719506 2026] [ssl:warn] [pid 19045:tid 19045] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 03:54:35.799004 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 03:54:35.799031 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:09.166688 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:09.166716 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:13:38.743137 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:13:38.743163 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:14:56.527385 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:14:56.527428 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:03.393666 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:03.393691 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:14.749737 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:14.749762 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:15:40.571691 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:15:40.571717 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri Apr 24 10:16:05.024575 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Apr 24 10:16:05.024634 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 00:01:48.434790 2026] [ssl:warn] [pid 19049:tid 19049] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 00:01:48.434807 2026] [ssl:warn] [pid 19049:tid 19049] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 02:44:22.463510 2026] [:error] [pid 28956:tid 28981] [client 193.46.255.149:44986] [client 193.46.255.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "wendybinks.com"] [uri "/favicon.ico"] [unique_id "aeu6BitJrzdpqZDw0b2pggAAAxE"]
[Sat Apr 25 03:25:47.889494 2026] [ssl:warn] [pid 40059:tid 40059] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:47.889520 2026] [ssl:warn] [pid 40059:tid 40059] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:25:50.083631 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:25:50.083657 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:05.314197 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:05.314220 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:14.616981 2026] [ssl:warn] [pid 40064:tid 40064] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:14.617008 2026] [ssl:warn] [pid 40064:tid 40064] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:28.485489 2026] [ssl:warn] [pid 40674:tid 40674] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:28.485515 2026] [ssl:warn] [pid 40674:tid 40674] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:26:30.477242 2026] [ssl:warn] [pid 40686:tid 40686] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:26:30.477279 2026] [ssl:warn] [pid 40686:tid 40686] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:01.672221 2026] [ssl:warn] [pid 13515:tid 13515] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:01.672285 2026] [ssl:warn] [pid 13515:tid 13515] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:38:03.762192 2026] [ssl:warn] [pid 13525:tid 13525] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:38:03.762217 2026] [ssl:warn] [pid 13525:tid 13525] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:46.664900 2026] [ssl:warn] [pid 44265:tid 44265] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:46.664927 2026] [ssl:warn] [pid 44265:tid 44265] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 03:44:48.751724 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 03:44:48.751749 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 17:02:13.581268 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 17:02:13.581296 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 18:02:17.307787 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 18:02:17.307804 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:11.296816 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:11.296843 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat Apr 25 20:11:34.445672 2026] [ssl:warn] [pid 44270:tid 44270] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat Apr 25 20:11:34.445707 2026] [ssl:warn] [pid 44270:tid 44270] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:44.754169 2026] [ssl:warn] [pid 63345:tid 63345] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:44.754195 2026] [ssl:warn] [pid 63345:tid 63345] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:48:47.129459 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:48:47.129486 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:00.946449 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:00.946478 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:10.786706 2026] [ssl:warn] [pid 63351:tid 63351] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:10.786712 2026] [ssl:warn] [pid 63351:tid 63351] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:17.626634 2026] [ssl:warn] [pid 64047:tid 64047] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:17.626671 2026] [ssl:warn] [pid 64047:tid 64047] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 03:49:19.653834 2026] [ssl:warn] [pid 64050:tid 64050] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 03:49:19.653861 2026] [ssl:warn] [pid 64050:tid 64050] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:37.041831 2026] [ssl:warn] [pid 42994:tid 42994] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:37.041865 2026] [ssl:warn] [pid 42994:tid 42994] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:06:39.888367 2026] [ssl:warn] [pid 43001:tid 43001] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:06:39.888394 2026] [ssl:warn] [pid 43001:tid 43001] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:16.522302 2026] [ssl:warn] [pid 8334:tid 8334] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:16.522329 2026] [ssl:warn] [pid 8334:tid 8334] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun Apr 26 04:13:18.505658 2026] [ssl:warn] [pid 8338:tid 8338] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun Apr 26 04:13:18.505683 2026] [ssl:warn] [pid 8338:tid 8338] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:42.713433 2026] [ssl:warn] [pid 19503:tid 19503] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:42.713461 2026] [ssl:warn] [pid 19503:tid 19503] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:36:45.127986 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:36:45.128029 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:00.448660 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:00.448684 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:09.113857 2026] [ssl:warn] [pid 19506:tid 19506] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:09.113882 2026] [ssl:warn] [pid 19506:tid 19506] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:15.876820 2026] [ssl:warn] [pid 20092:tid 20092] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:15.876845 2026] [ssl:warn] [pid 20092:tid 20092] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:37:17.871301 2026] [ssl:warn] [pid 20096:tid 20096] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:37:17.871325 2026] [ssl:warn] [pid 20096:tid 20096] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:43.430125 2026] [ssl:warn] [pid 57619:tid 57619] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:43.430150 2026] [ssl:warn] [pid 57619:tid 57619] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:47:45.481702 2026] [ssl:warn] [pid 57624:tid 57624] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:47:45.481737 2026] [ssl:warn] [pid 57624:tid 57624] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:14.531679 2026] [ssl:warn] [pid 22590:tid 22590] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:14.531706 2026] [ssl:warn] [pid 22590:tid 22590] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 03:54:16.567287 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 03:54:16.567313 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:14.373855 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:14.373892 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:06:29.479078 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:06:29.479104 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 07:50:24.507538 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 07:50:24.507563 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 09:00:40.885448 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 09:00:40.885479 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 11:48:08.643683 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 11:48:08.643712 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 12:10:33.775611 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 12:10:33.775649 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:30:04.130005 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:30:04.130254 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 14:31:09.813686 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 14:31:09.813720 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:47:45.806167 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:47:45.806195 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:01.124577 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:01.124604 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 19:50:16.009528 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 19:50:16.009553 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon Apr 27 20:13:26.197497 2026] [ssl:warn] [pid 22593:tid 22593] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon Apr 27 20:13:26.197530 2026] [ssl:warn] [pid 22593:tid 22593] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:49.107732 2026] [ssl:warn] [pid 11313:tid 11313] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:49.107758 2026] [ssl:warn] [pid 11313:tid 11313] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:48:51.337988 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:48:51.338014 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:05.305585 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:05.305611 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:14.468062 2026] [ssl:warn] [pid 11320:tid 11320] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:14.468087 2026] [ssl:warn] [pid 11320:tid 11320] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:20.716301 2026] [ssl:warn] [pid 11875:tid 11875] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:20.716329 2026] [ssl:warn] [pid 11875:tid 11875] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:49:23.069053 2026] [ssl:warn] [pid 11880:tid 11880] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:49:23.069079 2026] [ssl:warn] [pid 11880:tid 11880] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:53.989010 2026] [ssl:warn] [pid 49430:tid 49430] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:53.989036 2026] [ssl:warn] [pid 49430:tid 49430] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 03:59:55.932973 2026] [ssl:warn] [pid 49433:tid 49433] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 03:59:55.933015 2026] [ssl:warn] [pid 49433:tid 49433] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:30.520988 2026] [ssl:warn] [pid 14505:tid 14505] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:30.521012 2026] [ssl:warn] [pid 14505:tid 14505] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 04:06:32.441775 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 04:06:32.441800 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:05:40.259414 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:05:40.259441 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:06:05.233953 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:06:05.233979 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:15:29.869757 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:15:29.869779 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue Apr 28 07:22:25.486336 2026] [ssl:warn] [pid 14523:tid 14523] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue Apr 28 07:22:25.486362 2026] [ssl:warn] [pid 14523:tid 14523] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:45.673618 2026] [ssl:warn] [pid 53686:tid 53686] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:45.673643 2026] [ssl:warn] [pid 53686:tid 53686] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:47.966376 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:47.966402 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:31:56.810292 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:31:56.810318 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:06.113364 2026] [ssl:warn] [pid 53691:tid 53691] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:06.113400 2026] [ssl:warn] [pid 53691:tid 53691] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:13.879791 2026] [ssl:warn] [pid 54234:tid 54234] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:13.879817 2026] [ssl:warn] [pid 54234:tid 54234] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:32:15.853603 2026] [ssl:warn] [pid 54236:tid 54236] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:32:15.853654 2026] [ssl:warn] [pid 54236:tid 54236] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:39.532120 2026] [ssl:warn] [pid 26584:tid 26584] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:39.532145 2026] [ssl:warn] [pid 26584:tid 26584] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:42:41.491109 2026] [ssl:warn] [pid 26587:tid 26587] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:42:41.491132 2026] [ssl:warn] [pid 26587:tid 26587] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:16.543371 2026] [ssl:warn] [pid 56683:tid 56683] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:16.543399 2026] [ssl:warn] [pid 56683:tid 56683] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 03:49:18.520845 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 03:49:18.520870 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:37:11.703940 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:37:11.703966 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 08:38:04.121676 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 08:38:04.121700 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 09:49:16.332269 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 09:49:16.332298 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 10:16:50.640196 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 10:16:50.640221 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:10.851411 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:10.851431 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:24.307443 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:24.307468 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed Apr 29 19:54:36.653034 2026] [ssl:warn] [pid 56685:tid 56685] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Apr 29 19:54:36.653065 2026] [ssl:warn] [pid 56685:tid 56685] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:06.113889 2026] [ssl:warn] [pid 14108:tid 14108] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:06.113931 2026] [ssl:warn] [pid 14108:tid 14108] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:08.390609 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:08.390638 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:22.575427 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:22.575456 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:31.768035 2026] [ssl:warn] [pid 14113:tid 14113] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:31.768061 2026] [ssl:warn] [pid 14113:tid 14113] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:38.677520 2026] [ssl:warn] [pid 14745:tid 14745] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:38.677549 2026] [ssl:warn] [pid 14745:tid 14745] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:33:40.635180 2026] [ssl:warn] [pid 14747:tid 14747] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:33:40.635205 2026] [ssl:warn] [pid 14747:tid 14747] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:06.809092 2026] [ssl:warn] [pid 52781:tid 52781] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:06.809117 2026] [ssl:warn] [pid 52781:tid 52781] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:44:08.753320 2026] [ssl:warn] [pid 52785:tid 52785] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:44:08.753345 2026] [ssl:warn] [pid 52785:tid 52785] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:51.873440 2026] [ssl:warn] [pid 18059:tid 18059] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:51.873466 2026] [ssl:warn] [pid 18059:tid 18059] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 03:50:53.872742 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 03:50:53.872769 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 16:30:12.659951 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 16:30:12.659979 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:47:52.381119 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:47:52.381147 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:53:10.064742 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:53:10.064782 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:54:01.628305 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:54:01.628333 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:55:50.398083 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:55:50.398130 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 17:56:34.911440 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 17:56:34.911472 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:00:59.904373 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:00:59.904416 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:01:35.593691 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:01:35.593732 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:03:32.071127 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:03:32.071151 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:04:02.357456 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:04:02.357481 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:05:34.135425 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:05:34.135465 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu Apr 30 18:06:02.609985 2026] [ssl:warn] [pid 18062:tid 18062] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Apr 30 18:06:02.610010 2026] [ssl:warn] [pid 18062:tid 18062] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:51.005721 2026] [ssl:warn] [pid 11075:tid 11075] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:51.005788 2026] [ssl:warn] [pid 11075:tid 11075] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:36:53.276849 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:36:53.276874 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:06.494969 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:06.495012 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:15.643928 2026] [ssl:warn] [pid 11081:tid 11081] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:15.643952 2026] [ssl:warn] [pid 11081:tid 11081] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:28.567962 2026] [ssl:warn] [pid 11656:tid 11656] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:28.567988 2026] [ssl:warn] [pid 11656:tid 11656] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 03:37:30.588640 2026] [ssl:warn] [pid 11658:tid 11658] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 03:37:30.588665 2026] [ssl:warn] [pid 11658:tid 11658] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:15.907144 2026] [ssl:warn] [pid 7543:tid 7543] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:15.907174 2026] [ssl:warn] [pid 7543:tid 7543] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:32:18.979401 2026] [ssl:warn] [pid 7549:tid 7549] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:32:18.979437 2026] [ssl:warn] [pid 7549:tid 7549] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:03.119473 2026] [ssl:warn] [pid 37959:tid 37959] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:03.119508 2026] [ssl:warn] [pid 37959:tid 37959] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 04:39:05.085957 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 04:39:05.085985 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:29:06.676629 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:29:06.676705 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 01 10:32:16.506673 2026] [ssl:warn] [pid 37964:tid 37964] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 01 10:32:16.506711 2026] [ssl:warn] [pid 37964:tid 37964] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:49.059017 2026] [ssl:warn] [pid 55782:tid 55782] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:49.059044 2026] [ssl:warn] [pid 55782:tid 55782] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:12:51.247232 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:12:51.247290 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:08.625172 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:08.625198 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:17.646933 2026] [ssl:warn] [pid 55786:tid 55786] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:17.646957 2026] [ssl:warn] [pid 55786:tid 55786] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:25.532535 2026] [ssl:warn] [pid 56401:tid 56401] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:25.532561 2026] [ssl:warn] [pid 56401:tid 56401] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:13:27.435390 2026] [ssl:warn] [pid 56404:tid 56404] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:13:27.435415 2026] [ssl:warn] [pid 56404:tid 56404] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:44.050803 2026] [ssl:warn] [pid 22691:tid 22691] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:44.050828 2026] [ssl:warn] [pid 22691:tid 22691] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:18:45.964201 2026] [ssl:warn] [pid 22694:tid 22694] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:18:45.964226 2026] [ssl:warn] [pid 22694:tid 22694] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:04.403720 2026] [ssl:warn] [pid 53374:tid 53374] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:04.403747 2026] [ssl:warn] [pid 53374:tid 53374] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 02 03:25:06.329108 2026] [ssl:warn] [pid 53383:tid 53383] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 02 03:25:06.329133 2026] [ssl:warn] [pid 53383:tid 53383] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:54.031465 2026] [ssl:warn] [pid 31819:tid 31819] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:54.031492 2026] [ssl:warn] [pid 31819:tid 31819] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:28:56.518292 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:28:56.518308 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:04.415431 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:04.415457 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:13.857633 2026] [ssl:warn] [pid 31822:tid 31822] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:13.857658 2026] [ssl:warn] [pid 31822:tid 31822] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:27.842293 2026] [ssl:warn] [pid 32490:tid 32490] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:27.842366 2026] [ssl:warn] [pid 32490:tid 32490] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:29:29.857119 2026] [ssl:warn] [pid 32493:tid 32493] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:29:29.857143 2026] [ssl:warn] [pid 32493:tid 32493] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:25.021193 2026] [ssl:warn] [pid 10238:tid 10238] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:25.021220 2026] [ssl:warn] [pid 10238:tid 10238] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:44:27.002859 2026] [ssl:warn] [pid 10241:tid 10241] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:44:27.002885 2026] [ssl:warn] [pid 10241:tid 10241] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:00.278619 2026] [ssl:warn] [pid 40572:tid 40572] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:00.278646 2026] [ssl:warn] [pid 40572:tid 40572] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 03:51:02.302982 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 03:51:02.303007 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 03 05:59:22.560139 2026] [ssl:warn] [pid 40577:tid 40577] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 03 05:59:22.560163 2026] [ssl:warn] [pid 40577:tid 40577] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:52.938977 2026] [ssl:warn] [pid 54722:tid 54722] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:52.939000 2026] [ssl:warn] [pid 54722:tid 54722] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:09:55.404383 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:09:55.404409 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:18.330136 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:18.330159 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:27.543891 2026] [ssl:warn] [pid 54725:tid 54725] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:27.543915 2026] [ssl:warn] [pid 54725:tid 54725] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:41.316797 2026] [ssl:warn] [pid 55407:tid 55407] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:41.316821 2026] [ssl:warn] [pid 55407:tid 55407] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:10:43.227736 2026] [ssl:warn] [pid 55411:tid 55411] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:10:43.227761 2026] [ssl:warn] [pid 55411:tid 55411] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:31.630327 2026] [ssl:warn] [pid 26733:tid 26733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:31.630350 2026] [ssl:warn] [pid 26733:tid 26733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:19:33.537641 2026] [ssl:warn] [pid 26736:tid 26736] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:19:33.537666 2026] [ssl:warn] [pid 26736:tid 26736] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:55.386135 2026] [ssl:warn] [pid 56998:tid 56998] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:55.386160 2026] [ssl:warn] [pid 56998:tid 56998] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 03:25:57.294066 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 03:25:57.294090 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:24:46.910819 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:24:46.910846 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:18.229575 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:18.229599 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:25:39.807444 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:25:39.807480 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 07:26:01.849953 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 07:26:01.849978 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:17:58.856828 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:17:58.856876 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:14.912860 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:14.912886 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:19:38.283786 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:19:38.283812 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:23.579741 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:23.579776 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:39.965994 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:39.966019 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:21:50.795762 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:21:50.795788 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:03.994547 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:03.994574 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:31:12.729761 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:31:12.729788 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 14:35:49.192459 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 14:35:49.192485 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:39.939177 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:39.939217 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 04 15:03:48.947699 2026] [ssl:warn] [pid 57002:tid 57002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 04 15:03:48.947734 2026] [ssl:warn] [pid 57002:tid 57002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:51.616599 2026] [ssl:warn] [pid 36255:tid 36255] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:51.616624 2026] [ssl:warn] [pid 36255:tid 36255] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:47:54.039602 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:47:54.039627 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:16.282860 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:16.282894 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:25.400227 2026] [ssl:warn] [pid 36260:tid 36260] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:25.400281 2026] [ssl:warn] [pid 36260:tid 36260] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:32.400169 2026] [ssl:warn] [pid 36940:tid 36940] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:32.400195 2026] [ssl:warn] [pid 36940:tid 36940] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:48:34.495798 2026] [ssl:warn] [pid 36957:tid 36957] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:48:34.495829 2026] [ssl:warn] [pid 36957:tid 36957] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:41.198370 2026] [ssl:warn] [pid 8527:tid 8527] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:41.198396 2026] [ssl:warn] [pid 8527:tid 8527] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 03:57:43.106668 2026] [ssl:warn] [pid 8533:tid 8533] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 03:57:43.106703 2026] [ssl:warn] [pid 8533:tid 8533] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:31.544175 2026] [ssl:warn] [pid 39013:tid 39013] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:31.544212 2026] [ssl:warn] [pid 39013:tid 39013] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 04:04:33.430358 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 04:04:33.430387 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 05 10:11:44.159494 2026] [ssl:warn] [pid 39015:tid 39015] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 05 10:11:44.159521 2026] [ssl:warn] [pid 39015:tid 39015] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:42.835162 2026] [ssl:warn] [pid 46843:tid 46843] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:42.835188 2026] [ssl:warn] [pid 46843:tid 46843] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:19:45.072641 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:19:45.072667 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:03.246713 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:03.246739 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:11.869658 2026] [ssl:warn] [pid 46847:tid 46847] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:11.869684 2026] [ssl:warn] [pid 46847:tid 46847] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:16.776860 2026] [ssl:warn] [pid 47514:tid 47514] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:16.776884 2026] [ssl:warn] [pid 47514:tid 47514] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:20:18.667122 2026] [ssl:warn] [pid 47519:tid 47519] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:20:18.667148 2026] [ssl:warn] [pid 47519:tid 47519] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:28:59.626869 2026] [ssl:warn] [pid 18766:tid 18766] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:28:59.626885 2026] [ssl:warn] [pid 18766:tid 18766] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:29:01.551145 2026] [ssl:warn] [pid 18769:tid 18769] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:29:01.551171 2026] [ssl:warn] [pid 18769:tid 18769] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:46.833823 2026] [ssl:warn] [pid 48704:tid 48704] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:46.833848 2026] [ssl:warn] [pid 48704:tid 48704] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 03:35:48.751354 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 03:35:48.751380 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:19:29.367348 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:19:29.367374 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:20:18.545649 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:20:18.545676 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:29:26.085526 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:29:26.085553 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 06 07:30:06.841304 2026] [ssl:warn] [pid 48707:tid 48707] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 06 07:30:06.841319 2026] [ssl:warn] [pid 48707:tid 48707] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:51.529312 2026] [ssl:warn] [pid 25963:tid 25963] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:51.529338 2026] [ssl:warn] [pid 25963:tid 25963] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:43:53.783650 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:43:53.783676 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:09.057541 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:09.057565 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:18.056358 2026] [ssl:warn] [pid 25984:tid 25984] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:18.056382 2026] [ssl:warn] [pid 25984:tid 25984] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:25.749026 2026] [ssl:warn] [pid 26549:tid 26549] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:25.749066 2026] [ssl:warn] [pid 26549:tid 26549] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:44:27.645571 2026] [ssl:warn] [pid 26552:tid 26552] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:44:27.645606 2026] [ssl:warn] [pid 26552:tid 26552] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:52.558727 2026] [ssl:warn] [pid 64508:tid 64508] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:52.558753 2026] [ssl:warn] [pid 64508:tid 64508] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 03:53:54.489441 2026] [ssl:warn] [pid 64526:tid 64526] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 03:53:54.489465 2026] [ssl:warn] [pid 64526:tid 64526] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:48.360469 2026] [ssl:warn] [pid 29552:tid 29552] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:48.360496 2026] [ssl:warn] [pid 29552:tid 29552] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 04:00:50.263861 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 04:00:50.263887 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:34.549385 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:34.549412 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:43.222751 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:43.222777 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:28:53.231357 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:28:53.231383 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 08:31:58.136272 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 08:31:58.136299 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 07 14:14:10.315651 2026] [ssl:warn] [pid 29556:tid 29556] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 07 14:14:10.315680 2026] [ssl:warn] [pid 29556:tid 29556] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:37.264232 2026] [ssl:warn] [pid 48740:tid 48740] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:37.264301 2026] [ssl:warn] [pid 48740:tid 48740] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:39.462387 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:39.462425 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:20:53.544937 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:20:53.544962 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:03.350359 2026] [ssl:warn] [pid 48745:tid 48745] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:03.350384 2026] [ssl:warn] [pid 48745:tid 48745] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:10.016787 2026] [ssl:warn] [pid 49348:tid 49348] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:10.016813 2026] [ssl:warn] [pid 49348:tid 49348] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:21:11.957945 2026] [ssl:warn] [pid 49350:tid 49350] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:21:11.957970 2026] [ssl:warn] [pid 49350:tid 49350] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:29:58.740576 2026] [ssl:warn] [pid 20828:tid 20828] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:29:58.740604 2026] [ssl:warn] [pid 20828:tid 20828] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:30:00.622824 2026] [ssl:warn] [pid 20830:tid 20830] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:30:00.622849 2026] [ssl:warn] [pid 20830:tid 20830] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:36:57.675862 2026] [ssl:warn] [pid 50948:tid 50948] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:36:57.675867 2026] [ssl:warn] [pid 50948:tid 50948] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 08 03:36:59.952393 2026] [ssl:warn] [pid 50952:tid 50952] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 08 03:36:59.952418 2026] [ssl:warn] [pid 50952:tid 50952] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:39.087188 2026] [ssl:warn] [pid 6602:tid 6602] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:39.087215 2026] [ssl:warn] [pid 6602:tid 6602] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:24:41.689782 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:24:41.689814 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:00.108579 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:00.108606 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:09.370195 2026] [ssl:warn] [pid 6608:tid 6608] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:09.370274 2026] [ssl:warn] [pid 6608:tid 6608] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:23.084828 2026] [ssl:warn] [pid 7314:tid 7314] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:23.084855 2026] [ssl:warn] [pid 7314:tid 7314] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:25:24.985231 2026] [ssl:warn] [pid 7321:tid 7321] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:25:24.985294 2026] [ssl:warn] [pid 7321:tid 7321] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:48.196059 2026] [ssl:warn] [pid 44184:tid 44184] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:48.196084 2026] [ssl:warn] [pid 44184:tid 44184] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:34:50.133123 2026] [ssl:warn] [pid 44186:tid 44186] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:34:50.133147 2026] [ssl:warn] [pid 44186:tid 44186] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:48.517638 2026] [ssl:warn] [pid 9346:tid 9346] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:48.517664 2026] [ssl:warn] [pid 9346:tid 9346] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:41:50.470661 2026] [ssl:warn] [pid 9349:tid 9349] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:41:50.470685 2026] [ssl:warn] [pid 9349:tid 9349] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:39.357353 2026] [ssl:warn] [pid 36125:tid 36125] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:39.357380 2026] [ssl:warn] [pid 36125:tid 36125] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:50:41.268485 2026] [ssl:warn] [pid 36127:tid 36127] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:50:41.268509 2026] [ssl:warn] [pid 36127:tid 36127] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:43.491097 2026] [ssl:warn] [pid 9099:tid 9099] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:43.491123 2026] [ssl:warn] [pid 9099:tid 9099] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 03:59:45.401907 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 03:59:45.401931 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:33.990950 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:33.990992 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 09 20:02:38.353748 2026] [ssl:warn] [pid 9102:tid 9102] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 09 20:02:38.353790 2026] [ssl:warn] [pid 9102:tid 9102] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:48.889571 2026] [ssl:warn] [pid 52728:tid 52728] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:48.889597 2026] [ssl:warn] [pid 52728:tid 52728] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:24:50.768904 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:24:50.768928 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:03.795773 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:03.795797 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:14.703080 2026] [ssl:warn] [pid 52732:tid 52732] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:14.703104 2026] [ssl:warn] [pid 52732:tid 52732] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:21.176446 2026] [ssl:warn] [pid 54248:tid 54248] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:21.176471 2026] [ssl:warn] [pid 54248:tid 54248] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:25:23.055405 2026] [ssl:warn] [pid 54251:tid 54251] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:25:23.055437 2026] [ssl:warn] [pid 54251:tid 54251] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:39.342743 2026] [ssl:warn] [pid 31242:tid 31242] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:39.342767 2026] [ssl:warn] [pid 31242:tid 31242] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:38:41.276232 2026] [ssl:warn] [pid 31270:tid 31270] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:38:41.276314 2026] [ssl:warn] [pid 31270:tid 31270] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:34.840028 2026] [ssl:warn] [pid 62745:tid 62745] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:34.840053 2026] [ssl:warn] [pid 62745:tid 62745] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 03:45:36.804945 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 03:45:36.804970 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 07:27:54.179865 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 07:27:54.179878 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:01:50.358871 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:01:50.358898 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:02:00.894918 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:02:00.894943 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:06:19.100518 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:06:19.100544 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:09:19.677659 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:09:19.677685 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:26:32.173284 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:26:32.173331 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 17:49:13.204505 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 17:49:13.204530 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 10 18:06:02.357808 2026] [ssl:warn] [pid 62748:tid 62748] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 10 18:06:02.357833 2026] [ssl:warn] [pid 62748:tid 62748] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:50.236633 2026] [ssl:warn] [pid 61206:tid 61206] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:50.236677 2026] [ssl:warn] [pid 61206:tid 61206] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:31:52.632176 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:31:52.632206 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:08.162586 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:08.162612 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:16.831390 2026] [ssl:warn] [pid 61209:tid 61209] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:16.831415 2026] [ssl:warn] [pid 61209:tid 61209] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:30.582374 2026] [ssl:warn] [pid 61774:tid 61774] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:30.582400 2026] [ssl:warn] [pid 61774:tid 61774] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:32:32.462870 2026] [ssl:warn] [pid 61780:tid 61780] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:32:32.462876 2026] [ssl:warn] [pid 61780:tid 61780] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:05.086370 2026] [ssl:warn] [pid 34333:tid 34333] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:05.086399 2026] [ssl:warn] [pid 34333:tid 34333] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:41:06.960632 2026] [ssl:warn] [pid 34335:tid 34335] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:41:06.960657 2026] [ssl:warn] [pid 34335:tid 34335] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:49.865506 2026] [ssl:warn] [pid 65201:tid 65201] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:49.865532 2026] [ssl:warn] [pid 65201:tid 65201] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 03:47:51.760698 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 03:47:51.760723 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:08:04.941040 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:08:04.941083 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 11 14:10:35.879970 2026] [ssl:warn] [pid 65203:tid 65203] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 11 14:10:35.880003 2026] [ssl:warn] [pid 65203:tid 65203] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:41.937366 2026] [ssl:warn] [pid 36232:tid 36232] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:41.937393 2026] [ssl:warn] [pid 36232:tid 36232] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:44.264954 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:44.264979 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:11:58.681531 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:11:58.681557 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:07.609682 2026] [ssl:warn] [pid 36244:tid 36244] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:07.609708 2026] [ssl:warn] [pid 36244:tid 36244] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:14.319571 2026] [ssl:warn] [pid 36816:tid 36816] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:14.319596 2026] [ssl:warn] [pid 36816:tid 36816] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:12:16.102387 2026] [ssl:warn] [pid 36820:tid 36820] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:12:16.102461 2026] [ssl:warn] [pid 36820:tid 36820] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:39.353432 2026] [ssl:warn] [pid 9322:tid 9322] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:39.353457 2026] [ssl:warn] [pid 9322:tid 9322] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:20:41.173901 2026] [ssl:warn] [pid 9328:tid 9328] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:20:41.173926 2026] [ssl:warn] [pid 9328:tid 9328] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:03.205950 2026] [ssl:warn] [pid 39898:tid 39898] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:03.205975 2026] [ssl:warn] [pid 39898:tid 39898] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 12 03:27:05.025381 2026] [ssl:warn] [pid 39904:tid 39904] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 12 03:27:05.025408 2026] [ssl:warn] [pid 39904:tid 39904] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:41.810828 2026] [ssl:warn] [pid 19773:tid 19773] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:41.810856 2026] [ssl:warn] [pid 19773:tid 19773] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:44.361963 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:44.361989 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:47:56.413863 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:47:56.413889 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:05.627730 2026] [ssl:warn] [pid 19777:tid 19777] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:05.627757 2026] [ssl:warn] [pid 19777:tid 19777] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:13.362140 2026] [ssl:warn] [pid 20341:tid 20341] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:13.362170 2026] [ssl:warn] [pid 20341:tid 20341] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:48:15.237684 2026] [ssl:warn] [pid 20343:tid 20343] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:48:15.237709 2026] [ssl:warn] [pid 20343:tid 20343] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:04.144055 2026] [ssl:warn] [pid 57956:tid 57956] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:04.144082 2026] [ssl:warn] [pid 57956:tid 57956] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 03:57:06.029273 2026] [ssl:warn] [pid 57959:tid 57959] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 03:57:06.029300 2026] [ssl:warn] [pid 57959:tid 57959] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:56.764663 2026] [ssl:warn] [pid 23733:tid 23733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:56.764690 2026] [ssl:warn] [pid 23733:tid 23733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 04:03:58.643988 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 04:03:58.644011 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:04.401699 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:04.401730 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:17.825388 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:17.825412 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:46:37.600858 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:46:37.600884 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 13 20:49:53.054957 2026] [ssl:warn] [pid 23735:tid 23735] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 13 20:49:53.054984 2026] [ssl:warn] [pid 23735:tid 23735] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:49.935814 2026] [ssl:warn] [pid 7356:tid 7356] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:49.935843 2026] [ssl:warn] [pid 7356:tid 7356] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:32:52.332884 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:32:52.332910 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:08.340894 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:08.340920 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:17.858249 2026] [ssl:warn] [pid 7359:tid 7359] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:17.858249 2026] [ssl:warn] [pid 7359:tid 7359] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:31.600749 2026] [ssl:warn] [pid 7942:tid 7942] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:31.600775 2026] [ssl:warn] [pid 7942:tid 7942] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:33:33.494807 2026] [ssl:warn] [pid 7947:tid 7947] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:33:33.494831 2026] [ssl:warn] [pid 7947:tid 7947] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:42.922856 2026] [ssl:warn] [pid 45735:tid 45735] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:42.922881 2026] [ssl:warn] [pid 45735:tid 45735] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:42:44.752207 2026] [ssl:warn] [pid 45740:tid 45740] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:42:44.752230 2026] [ssl:warn] [pid 45740:tid 45740] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:53.163078 2026] [ssl:warn] [pid 11534:tid 11534] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:53.163116 2026] [ssl:warn] [pid 11534:tid 11534] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 14 03:49:55.004735 2026] [ssl:warn] [pid 11536:tid 11536] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 14 03:49:55.004759 2026] [ssl:warn] [pid 11536:tid 11536] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:51.256509 2026] [ssl:warn] [pid 62684:tid 62684] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:51.256565 2026] [ssl:warn] [pid 62684:tid 62684] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:35:53.698609 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:35:53.698633 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:09.058517 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:09.058543 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:18.096117 2026] [ssl:warn] [pid 62688:tid 62688] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:18.096142 2026] [ssl:warn] [pid 62688:tid 62688] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:28.852183 2026] [ssl:warn] [pid 63259:tid 63259] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:28.852222 2026] [ssl:warn] [pid 63259:tid 63259] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:36:30.728324 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:36:30.728350 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:39:43.673641 2026] [ssl:warn] [pid 63261:tid 63261] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:39:43.673679 2026] [ssl:warn] [pid 63261:tid 63261] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:41.964870 2026] [ssl:warn] [pid 35750:tid 35750] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:41.964897 2026] [ssl:warn] [pid 35750:tid 35750] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:45:43.824378 2026] [ssl:warn] [pid 35753:tid 35753] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:45:43.824418 2026] [ssl:warn] [pid 35753:tid 35753] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:26.909063 2026] [ssl:warn] [pid 1135:tid 1135] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:26.909097 2026] [ssl:warn] [pid 1135:tid 1135] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 03:52:28.758395 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 03:52:28.758432 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:00.533565 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:00.533596 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 15 12:42:04.721890 2026] [ssl:warn] [pid 1138:tid 1138] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 15 12:42:04.721915 2026] [ssl:warn] [pid 1138:tid 1138] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:44.930611 2026] [ssl:warn] [pid 20134:tid 20134] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:44.930639 2026] [ssl:warn] [pid 20134:tid 20134] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:13:47.993372 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:13:47.993399 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:03.834791 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:03.834815 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:12.428346 2026] [ssl:warn] [pid 20140:tid 20140] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:12.428371 2026] [ssl:warn] [pid 20140:tid 20140] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:18.154153 2026] [ssl:warn] [pid 20707:tid 20707] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:18.154179 2026] [ssl:warn] [pid 20707:tid 20707] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:14:19.987116 2026] [ssl:warn] [pid 20712:tid 20712] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:14:19.987142 2026] [ssl:warn] [pid 20712:tid 20712] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:10.302948 2026] [ssl:warn] [pid 58568:tid 58568] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:10.302975 2026] [ssl:warn] [pid 58568:tid 58568] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:23:12.145453 2026] [ssl:warn] [pid 58570:tid 58570] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:23:12.145493 2026] [ssl:warn] [pid 58570:tid 58570] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:03.137362 2026] [ssl:warn] [pid 24538:tid 24538] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:03.137387 2026] [ssl:warn] [pid 24538:tid 24538] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 16 03:30:04.978572 2026] [ssl:warn] [pid 24822:tid 24822] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 16 03:30:04.978598 2026] [ssl:warn] [pid 24822:tid 24822] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:40.826581 2026] [ssl:warn] [pid 50040:tid 50040] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:40.826608 2026] [ssl:warn] [pid 50040:tid 50040] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:43.246944 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:43.246969 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:13:57.857452 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:13:57.857478 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:08.694911 2026] [ssl:warn] [pid 50043:tid 50043] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:08.694935 2026] [ssl:warn] [pid 50043:tid 50043] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:14.417648 2026] [ssl:warn] [pid 50916:tid 50916] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:14.417673 2026] [ssl:warn] [pid 50916:tid 50916] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:14:16.215504 2026] [ssl:warn] [pid 50918:tid 50918] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:14:16.215529 2026] [ssl:warn] [pid 50918:tid 50918] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:28.651805 2026] [ssl:warn] [pid 28339:tid 28339] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:28.651840 2026] [ssl:warn] [pid 28339:tid 28339] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:25:30.399382 2026] [ssl:warn] [pid 28342:tid 28342] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:25:30.399424 2026] [ssl:warn] [pid 28342:tid 28342] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:49.148226 2026] [ssl:warn] [pid 59002:tid 59002] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:49.148304 2026] [ssl:warn] [pid 59002:tid 59002] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 17 03:31:50.993213 2026] [ssl:warn] [pid 59010:tid 59010] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 17 03:31:50.993289 2026] [ssl:warn] [pid 59010:tid 59010] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:41.953782 2026] [ssl:warn] [pid 16759:tid 16759] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:41.953810 2026] [ssl:warn] [pid 16759:tid 16759] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:44.341069 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:44.341093 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:27:57.410317 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:27:57.410342 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:06.107559 2026] [ssl:warn] [pid 16763:tid 16763] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:06.107586 2026] [ssl:warn] [pid 16763:tid 16763] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:13.740286 2026] [ssl:warn] [pid 17332:tid 17332] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:13.740311 2026] [ssl:warn] [pid 17332:tid 17332] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:28:15.518627 2026] [ssl:warn] [pid 17334:tid 17334] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:28:15.518651 2026] [ssl:warn] [pid 17334:tid 17334] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:09.995954 2026] [ssl:warn] [pid 55108:tid 55108] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:09.995989 2026] [ssl:warn] [pid 55108:tid 55108] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:37:11.843190 2026] [ssl:warn] [pid 55110:tid 55110] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:37:11.843215 2026] [ssl:warn] [pid 55110:tid 55110] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:55.705862 2026] [ssl:warn] [pid 20730:tid 20730] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:55.705889 2026] [ssl:warn] [pid 20730:tid 20730] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 03:43:57.516900 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 03:43:57.516925 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:36:38.484470 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:36:38.484514 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:37:19.152199 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:37:19.152267 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:40:26.772995 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:40:26.773022 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:04.116060 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:04.116087 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:41:32.472179 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:41:32.472179 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:42:02.157322 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:42:02.157348 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:10.181224 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:10.181309 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:43:47.259412 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:43:47.259439 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:44:33.059950 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:44:33.059977 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 18 08:46:19.436543 2026] [ssl:warn] [pid 20733:tid 20733] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 18 08:46:19.436600 2026] [ssl:warn] [pid 20733:tid 20733] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:41.333331 2026] [ssl:warn] [pid 33962:tid 33962] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:41.333360 2026] [ssl:warn] [pid 33962:tid 33962] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:43.695446 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:43.695482 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:48:59.325908 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:48:59.325941 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:09.560803 2026] [ssl:warn] [pid 33967:tid 33967] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:09.560837 2026] [ssl:warn] [pid 33967:tid 33967] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:20.329473 2026] [ssl:warn] [pid 34537:tid 34537] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:20.329500 2026] [ssl:warn] [pid 34537:tid 34537] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:49:22.162379 2026] [ssl:warn] [pid 34546:tid 34546] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:49:22.162413 2026] [ssl:warn] [pid 34546:tid 34546] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:28.066951 2026] [ssl:warn] [pid 7132:tid 7132] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:28.066976 2026] [ssl:warn] [pid 7132:tid 7132] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 03:58:29.913830 2026] [ssl:warn] [pid 7138:tid 7138] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 03:58:29.913855 2026] [ssl:warn] [pid 7138:tid 7138] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:27.986429 2026] [ssl:warn] [pid 38651:tid 38651] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:27.986454 2026] [ssl:warn] [pid 38651:tid 38651] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 19 04:05:29.795428 2026] [ssl:warn] [pid 38653:tid 38653] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 19 04:05:29.795455 2026] [ssl:warn] [pid 38653:tid 38653] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:56.058375 2026] [ssl:warn] [pid 53855:tid 53855] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:56.058419 2026] [ssl:warn] [pid 53855:tid 53855] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:27:58.456443 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:27:58.456501 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:28:49.832083 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:28:49.832108 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:03.947511 2026] [ssl:warn] [pid 53858:tid 53858] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:03.947537 2026] [ssl:warn] [pid 53858:tid 53858] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:17.730499 2026] [ssl:warn] [pid 54586:tid 54586] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:17.730525 2026] [ssl:warn] [pid 54586:tid 54586] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:19.550445 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:19.550470 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:29:22.390327 2026] [ssl:warn] [pid 54590:tid 54590] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:29:22.390354 2026] [ssl:warn] [pid 54590:tid 54590] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:55.178540 2026] [ssl:warn] [pid 27687:tid 27687] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:55.178567 2026] [ssl:warn] [pid 27687:tid 27687] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:38:56.982267 2026] [ssl:warn] [pid 27691:tid 27691] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:38:56.982298 2026] [ssl:warn] [pid 27691:tid 27691] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:44.620482 2026] [ssl:warn] [pid 59180:tid 59180] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:44.620508 2026] [ssl:warn] [pid 59180:tid 59180] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 03:45:46.470651 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 03:45:46.470676 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Wed May 20 07:54:38.102938 2026] [ssl:warn] [pid 59187:tid 59187] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed May 20 07:54:38.102962 2026] [ssl:warn] [pid 59187:tid 59187] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:04.038726 2026] [ssl:warn] [pid 44370:tid 44370] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:04.038834 2026] [ssl:warn] [pid 44370:tid 44370] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:43:10.701104 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:43:10.701130 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:44:52.014911 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:44:52.014935 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:02.962001 2026] [ssl:warn] [pid 44380:tid 44380] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:02.962024 2026] [ssl:warn] [pid 44380:tid 44380] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:09.711442 2026] [ssl:warn] [pid 46101:tid 46101] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:09.711467 2026] [ssl:warn] [pid 46101:tid 46101] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:45:11.494273 2026] [ssl:warn] [pid 46103:tid 46103] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:45:11.494298 2026] [ssl:warn] [pid 46103:tid 46103] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:53.809137 2026] [ssl:warn] [pid 19080:tid 19080] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:53.809163 2026] [ssl:warn] [pid 19080:tid 19080] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 03:56:55.907520 2026] [ssl:warn] [pid 19104:tid 19104] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 03:56:55.907547 2026] [ssl:warn] [pid 19104:tid 19104] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:28.676520 2026] [ssl:warn] [pid 49834:tid 49834] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:28.676560 2026] [ssl:warn] [pid 49834:tid 49834] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Thu May 21 04:03:30.453845 2026] [ssl:warn] [pid 49837:tid 49837] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 21 04:03:30.453870 2026] [ssl:warn] [pid 49837:tid 49837] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:51.398794 2026] [ssl:warn] [pid 10225:tid 10225] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:51.398831 2026] [ssl:warn] [pid 10225:tid 10225] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:45:58.093578 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:45:58.093602 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:12.453748 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:12.453774 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:25.913712 2026] [ssl:warn] [pid 10235:tid 10235] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:25.913737 2026] [ssl:warn] [pid 10235:tid 10235] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:31.836316 2026] [ssl:warn] [pid 11104:tid 11104] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:31.836341 2026] [ssl:warn] [pid 11104:tid 11104] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:47:33.616770 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:47:33.616795 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:50:37.046493 2026] [ssl:warn] [pid 11110:tid 11110] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:50:37.046520 2026] [ssl:warn] [pid 11110:tid 11110] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:01.241784 2026] [ssl:warn] [pid 49374:tid 49374] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:01.241808 2026] [ssl:warn] [pid 49374:tid 49374] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 03:59:03.020062 2026] [ssl:warn] [pid 49376:tid 49376] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 03:59:03.020087 2026] [ssl:warn] [pid 49376:tid 49376] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:49.246598 2026] [ssl:warn] [pid 15542:tid 15542] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:49.246625 2026] [ssl:warn] [pid 15542:tid 15542] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Fri May 22 04:05:51.002364 2026] [ssl:warn] [pid 15544:tid 15544] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri May 22 04:05:51.002389 2026] [ssl:warn] [pid 15544:tid 15544] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:50.948983 2026] [ssl:warn] [pid 25505:tid 25505] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:50.949013 2026] [ssl:warn] [pid 25505:tid 25505] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:33:54.083152 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:33:54.083158 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:02.127594 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:02.127621 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:14.638514 2026] [ssl:warn] [pid 25511:tid 25511] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:14.638540 2026] [ssl:warn] [pid 25511:tid 25511] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:21.012853 2026] [ssl:warn] [pid 26970:tid 26970] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:21.012879 2026] [ssl:warn] [pid 26970:tid 26970] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:35:22.747674 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:35:22.747698 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:38:42.754843 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:38:42.754868 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:39:38.566144 2026] [ssl:warn] [pid 26972:tid 26972] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:39:38.566178 2026] [ssl:warn] [pid 26972:tid 26972] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:31.857754 2026] [ssl:warn] [pid 65386:tid 65386] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:31.857779 2026] [ssl:warn] [pid 65386:tid 65386] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:47:33.575673 2026] [ssl:warn] [pid 65429:tid 65429] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:47:33.575698 2026] [ssl:warn] [pid 65429:tid 65429] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:49.606317 2026] [ssl:warn] [pid 30894:tid 30894] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:49.606343 2026] [ssl:warn] [pid 30894:tid 30894] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sat May 23 03:53:51.340540 2026] [ssl:warn] [pid 30899:tid 30899] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sat May 23 03:53:51.340565 2026] [ssl:warn] [pid 30899:tid 30899] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:53.928076 2026] [ssl:warn] [pid 40681:tid 40681] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:53.928141 2026] [ssl:warn] [pid 40681:tid 40681] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:27:58.275270 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:27:58.275299 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:15.957391 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:15.957418 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:38.415095 2026] [ssl:warn] [pid 40687:tid 40687] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:38.415118 2026] [ssl:warn] [pid 40687:tid 40687] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:52.243941 2026] [ssl:warn] [pid 41969:tid 41969] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:52.243967 2026] [ssl:warn] [pid 41969:tid 41969] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:29:53.977892 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:29:53.977915 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:35:07.884337 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:35:07.884366 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:36:29.503373 2026] [ssl:warn] [pid 41976:tid 41976] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:36:29.503399 2026] [ssl:warn] [pid 41976:tid 41976] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:12.244163 2026] [ssl:warn] [pid 20279:tid 20279] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:12.244189 2026] [ssl:warn] [pid 20279:tid 20279] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:45:13.980108 2026] [ssl:warn] [pid 20283:tid 20283] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:45:13.980133 2026] [ssl:warn] [pid 20283:tid 20283] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:28.492986 2026] [ssl:warn] [pid 50821:tid 50821] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:28.493012 2026] [ssl:warn] [pid 50821:tid 50821] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 03:51:30.250315 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 03:51:30.250340 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:42.007520 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:42.007556 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:44.429103 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:44.429130 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:49.145453 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:49.145476 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:50.701972 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:50.701996 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 09:08:53.139070 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 09:08:53.139095 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:40.230896 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:40.230958 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:42.756911 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:42.756949 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:45.045721 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:45.045731 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Sun May 24 20:31:47.465588 2026] [ssl:warn] [pid 50827:tid 50827] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Sun May 24 20:31:47.465612 2026] [ssl:warn] [pid 50827:tid 50827] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:51.052676 2026] [ssl:warn] [pid 2860:tid 2860] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:51.052714 2026] [ssl:warn] [pid 2860:tid 2860] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:07:52.825064 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:07:52.825088 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:29.011962 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:29.011989 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:44.217816 2026] [ssl:warn] [pid 2865:tid 2865] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:44.217841 2026] [ssl:warn] [pid 2865:tid 2865] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:57.230789 2026] [ssl:warn] [pid 3900:tid 3900] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:57.230815 2026] [ssl:warn] [pid 3900:tid 3900] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:09:59.061018 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:09:59.061043 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:13:45.872794 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:13:45.872827 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:06.329790 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:06.329817 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:15:31.023624 2026] [ssl:warn] [pid 3903:tid 3903] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:15:31.023649 2026] [ssl:warn] [pid 3903:tid 3903] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:54.300996 2026] [ssl:warn] [pid 43697:tid 43697] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:54.301021 2026] [ssl:warn] [pid 43697:tid 43697] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:22:56.057361 2026] [ssl:warn] [pid 43703:tid 43703] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:22:56.057386 2026] [ssl:warn] [pid 43703:tid 43703] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:03.007069 2026] [ssl:warn] [pid 9257:tid 9257] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:03.007108 2026] [ssl:warn] [pid 9257:tid 9257] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 03:29:04.728634 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 03:29:04.728681 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:14.817221 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:14.817278 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:35:20.899817 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:35:20.899841 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:52.372671 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:52.372696 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Mon May 25 07:36:57.742103 2026] [ssl:warn] [pid 9263:tid 9263] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Mon May 25 07:36:57.742141 2026] [ssl:warn] [pid 9263:tid 9263] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:46.150193 2026] [ssl:warn] [pid 13712:tid 13712] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:46.150222 2026] [ssl:warn] [pid 13712:tid 13712] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:08:50.871402 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:08:50.871426 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:12.303875 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:12.303901 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:31.213660 2026] [ssl:warn] [pid 13721:tid 13721] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:31.213684 2026] [ssl:warn] [pid 13721:tid 13721] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:43.377194 2026] [ssl:warn] [pid 15299:tid 15299] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:43.377283 2026] [ssl:warn] [pid 15299:tid 15299] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:10:45.128634 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:10:45.128660 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:13:49.982310 2026] [ssl:warn] [pid 15303:tid 15303] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:13:49.982336 2026] [ssl:warn] [pid 15303:tid 15303] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:48.603894 2026] [ssl:warn] [pid 54349:tid 54349] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:48.603932 2026] [ssl:warn] [pid 54349:tid 54349] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:22:50.350654 2026] [ssl:warn] [pid 54367:tid 54367] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:22:50.350680 2026] [ssl:warn] [pid 54367:tid 54367] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:08.435163 2026] [ssl:warn] [pid 19990:tid 19990] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:08.435188 2026] [ssl:warn] [pid 19990:tid 19990] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 03:29:10.186626 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 03:29:10.186651 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:25:59.495534 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:25:59.495570 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:06.754613 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:06.754639 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name
[Tue May 26 17:27:41.154175 2026] [ssl:warn] [pid 19995:tid 19995] AH01906: wendybinks.com:443:0 server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Tue May 26 17:27:41.154200 2026] [ssl:warn] [pid 19995:tid 19995] AH01909: wendybinks.com:443:0 server certificate does NOT include an ID which matches the server name